{"id":"CVE-2022-35122","aliases":["EUVD-2022-38020","GHSA-9hm3-qw9q-h8gf"],"status":"published","title":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows...","description":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01161,"percentile":0.67375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-306"],"published":"2022-08-17T20:27:15Z","modified":"2026-06-17T04:51:28Z","products":[{"vendor":"ecowitt","product":"gw1100_firmware"}],"references":[{"url":"https://www.pizzapower.me/2022/06/30/the-incredibly-insecure-weather-station/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35122"},{"url":"https://github.com/advisories/GHSA-9hm3-qw9q-h8gf"}],"sources":{"cve":[{"id":"CVE-2022-35122","description":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords.","status":"published","published":"2022-08-17T20:27:15Z","modified":"2024-08-03T09:29:17.279Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-38020","description":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords.","status":"published","published":"2022-08-17T20:27:15Z","modified":"2024-08-03T09:29:17Z","updated_at":"2026-11-03T03:25:27.391244Z"}],"ghsa":[{"id":"GHSA-9hm3-qw9q-h8gf","title":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows...","description":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords.","status":"published","published":"2022-08-18T00:00:15Z","modified":"2023-01-31T05:07:56Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:49:18.423365Z"}],"nvd":[{"id":"CVE-2022-35122","description":"An access control issue in Ecowitt GW1100 Series Weather Stations \u003c=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords.","status":"published","published":"2022-08-17T21:15:09.427Z","modified":"2026-06-17T04:51:28.71Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:07:25.242752Z"}]}}