CVE-2022-0183

Name of the Vulnerable Software and Affected Versions MIRUPASS PW10 firmware all versions MIRUPASS PW20 firmware all versions

Description The issue concerns a missing encryption of sensitive data, allowing an attacker with physical access to the device to obtain stored passwords.

Recommendations For MIRUPASS PW10 firmware, consider implementing additional security measures to protect stored passwords until a fix is available. For MIRUPASS PW20 firmware, restrict physical access to the device to minimize the risk of exploitation. As a temporary workaround, consider using alternative password storage methods that provide encryption until the issue is resolved.