Approved changes feed: RSS · Atom

cpe:2.3:o:oringnet:iap-420_firmware:2.0m:*:*:*:*:*:*:*

part: o version: 2.0m update: *

VendorOringnet (bd93c2d1-adc0-5fc6-92f4-86098c3f2924)
ProductIap 420 Firmware (9d45995b-d30f-55d1-b9b9-a8dee7f94017)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3203 vulnerable 2026-06-08 05:47:19.710899 ORing net IAP-420(+) Hidden Functionality
CRITICAL (9.8)
On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.
Published: 2022-10-21T12:30:12.353Z
Updated: 2025-05-07T14:06:37.577Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.