{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"moneo appliance","vendor":"ifm","versions":[{"lessThanOrEqual":"1.9.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"moneo appliance","vendor":"ifm","versions":[{"lessThanOrEqual":"1.9.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ifm:moneo_qha210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D026E52C-4E13-4D47-B723-A819A95FF4B5","versionEndIncluding":"1.9.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ifm:moneo_qha210:-:*:*:*:*:*:*:*","matchCriteriaId":"1CEB61EB-5EB4-4954-9D25-68E1FF181EB6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ifm:moneo_qha200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9759E1AE-E126-4DB9-A7B6-709DFAB72001","versionEndIncluding":"1.9.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ifm:moneo_qha200:-:*:*:*:*:*:*:*","matchCriteriaId":"7370B2B8-65E3-43C9-9C79-208EE01CDB3D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.\n"},{"lang":"es","value":"En IFM Moneo Appliance con versión hasta 1.9.3, un atacante remoto no autenticado puede restablecer la contraseña del administrador proporcionando únicamente el número de serie y así obtener el control total del dispositivo."}],"id":"CVE-2022-3485","lastModified":"2026-06-17T04:59:37.120","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-3485","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-04-22T17:52:42.645845Z","version":"2.0.3"}}]},"published":"2022-12-12T12:15:10.697","references":[{"source":"info@cert.vde.com","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-050/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-050/"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-640"}],"source":"info@cert.vde.com","type":"Secondary"}]}