CVE-2022-28113: Fantec MWID25-Ds Firmware

High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days.

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.

Affected products

• Fantec MWID25-Ds Firmware: version 2.000.030 only

Published 2022-04-15. Last modified 2026-06-17.