{"id":"CVE-2022-3010","aliases":["EUVD-2022-42446","GHSA-x5gw-mqgf-fwh3"],"status":"published","title":"Predictable SSH credentials in Priva TopControl Suite","description":"The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00584,"percentile":0.48241,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1391","CWE-916"],"published":"2024-01-02T18:32:22Z","modified":"2026-06-17T04:58:38Z","products":[{"vendor":"priva","product":"top_control_suite"},{"vendor":"priva","product":"topcontrol suite - bacnet"},{"vendor":"priva","product":"topcontrol suite - blue id"},{"vendor":"priva","product":"topcontrol suite - compass"},{"vendor":"priva","product":"topcontrol suite - connect"},{"vendor":"priva","product":"topcontrol suite - tpc"}],"references":[{"url":"https://csirt.divd.nl/CVE-2022-3010","tags":["third-party-advisory","x_transferred","Broken Link"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-22-356-01","tags":["third-party-advisory","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://csirt.divd.nl/DIVD-2022-00035","tags":["related","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3010"},{"url":"https://github.com/advisories/GHSA-x5gw-mqgf-fwh3"}],"sources":{"cve":[{"id":"CVE-2022-3010","title":"Predictable SSH credentials in Priva TopControl Suite","description":"The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.","status":"published","published":"2024-01-02T18:32:22.947Z","modified":"2025-06-04T19:17:57.435Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-1391"],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-42446","description":"The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.","status":"published","published":"2024-01-02T18:32:22Z","modified":"2025-06-04T19:17:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:32:29.680736Z"}],"ghsa":[{"id":"GHSA-x5gw-mqgf-fwh3","title":"The Priva TopControl Suite contains predictable credentials for the SSH service, based on the...","description":"The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.","status":"published","published":"2024-01-02T21:30:25Z","modified":"2024-01-09T18:30:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-916","CWE-1391"],"updated_at":"2026-11-02T14:55:22.936224Z"}],"nvd":[{"id":"CVE-2022-3010","description":"The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.","status":"published","published":"2024-01-02T19:15:09.783Z","modified":"2026-06-17T04:58:38.26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-1391","CWE-916"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}