CVE-2022-3485: Ifm Moneo QHA200 Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

Affected products

• Ifm Moneo QHA200 Firmware: up to and including 1.9.3
• Ifm Moneo QHA210 Firmware: up to and including 1.9.3

Published 2022-12-12. Last modified 2026-06-17.