CVE-2022-24610

Severity: high (CVSS 8.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-24 · updated 2026-06-17
Weakness: CWE-522

Description

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera.

Affected products

Alecto Dvc-215Ip Firmware: from 63.1.1.137 before 63.1.1.173 — fixed in 63.1.1.173

How to fix

Upgrade to a fixed version: Alecto Dvc-215Ip Firmware 63.1.1.173. Check the vendor advisory for mitigations.

References

https://support.alecto.nl/nl/support/solutions/articles/48001210271-kwetsbaarheid-vulnerability-firmware-below-version-63-1-1-173
https://support.alecto.nl/nl/support/solutions/articles/48001210271-kwetsbaarheid-vulnerability-firmware-below-version-63-1-1-173

Get alerted when CVE-2022-24610 or the next vulnerability affects your stack