What’s Vulnerable › Vulnerabilities

CVE-2022-47891: Admin password reset in NetMan 204

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-03 · updated 2026-06-17
• Weakness: CWE-798

Description

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.

Affected products

• Riello UPS Netman-204: all versions

References

• https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
• https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups

Get alerted when CVE-2022-47891 or the next vulnerability affects your stack