{"id":"CVE-2022-33735","aliases":["EUVD-2022-36774","GHSA-rmm9-xcr8-ff62"],"status":"published","title":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may...","description":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00224,"percentile":0.13129,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-307"],"published":"2022-09-20T19:44:06Z","modified":"2026-06-17T04:49:20Z","products":[{"vendor":"huawei","product":"ws7200-10_firmware"}],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220628-01-2eda0853-en","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33735"},{"url":"https://github.com/advisories/GHSA-rmm9-xcr8-ff62"}],"sources":{"cve":[{"id":"CVE-2022-33735","description":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed.","status":"published","published":"2022-09-20T19:44:06Z","modified":"2025-05-28T16:02:04.978Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:34:40.621895Z"}],"euvd":[{"id":"EUVD-2022-36774","description":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed.","status":"published","published":"2022-09-20T19:44:06Z","modified":"2025-05-28T16:02:04Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:36.96564Z"}],"ghsa":[{"id":"GHSA-rmm9-xcr8-ff62","title":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may...","description":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed.","status":"published","published":"2022-09-21T00:00:36Z","modified":"2023-01-31T05:04:21Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:48:39.538271Z"}],"nvd":[{"id":"CVE-2022-33735","description":"There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed.","status":"published","published":"2022-09-20T20:15:09.927Z","modified":"2026-06-17T04:49:20.587Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:07:28.118799Z"}]}}