Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-3203 EUVD-2022-42620GHSA-4hvx-h8mx-pjgh

ORing net IAP-420(+) Hidden Functionality

Published Oct 21, 2022 · Updated May 7, 2025 · Assigned by CERTVDE

Description

On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.

Affected products

VendorProductAffectedFixed
ORing IAP-420(+) FW 2.0m —

References