Description
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ifm | moneo appliance | ≤ 1.9.3 | — |
Advisories 1
- VDE-2022-050 IFM: weak password recovery vulnerability in moneo appliance CERT@VDE · Jan 6, 2026