CVE-2022-2103: Secheron Sepcos Control And Protection Relay Firmware

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Affected products

• Secheron Sepcos Control And Protection Relay Firmware: from 1.23.0, before 1.23.21 (fixed in 1.23.21); from 1.24.0, before 1.24.8 (fixed in 1.24.8); from 1.25.0, before 1.25.3 (fixed in 1.25.3)

Published 2022-06-24. Last modified 2026-06-17.