Approved changes feed: RSS · Atom

cpe:2.3:h:ifm:moneo_qha210:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorIfm (f0a39bff-7dad-56a0-beb1-61e306789948)
ProductMoneo Qha210 (50a31f9f-2ea1-5bcb-906b-a7e8aa8fd4ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5404 vulnerable 2026-06-08 06:56:15.824996 ifm: moneo prone to weak password recovery mechanism
CRITICAL (9.8)
An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.
Published: 2024-06-03T09:00:55.691Z
Updated: 2024-08-01T21:11:12.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3485 not_vulnerable 2026-06-08 05:48:21.255084 Weak Password Recovery in ifm moneo appliance
CRITICAL (9.8)
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.
Published: 2022-12-12T11:39:32.224Z
Updated: 2025-04-22T17:52:53.648Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.