CVE-2022-1668: Secheron Sepcos Control And Protection Relay Firmware

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH.

Affected products

• Secheron Sepcos Control And Protection Relay Firmware: from 1.23.0, before 1.23.21 (fixed in 1.23.21); from 1.24.0, before 1.24.8 (fixed in 1.24.8); from 1.25.0, before 1.25.3 (fixed in 1.25.3)

Published 2022-06-24. Last modified 2026-06-17.