What’s Vulnerable › Vulnerabilities

CVE-2022-2103: Secheron SEPCOS Control and Protection Relay

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-24 · updated 2026-06-17
• Weakness: CWE-284

Description

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Affected products

• Secheron SEPCOS Control and Protection Relay firmware package: from 1.23.0 before 1.23.21; from 1.24.0 before 1.24.8; from 1.25.0 before 1.25.3 — fixed in 1.23.21, 1.24.8, 1.25.3

How to fix

Upgrade to a fixed version: Secheron SEPCOS Control and Protection Relay firmware package 1.23.21, 1.24.8, 1.25.3. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

Get alerted when CVE-2022-2103 or the next vulnerability affects your stack