CVE-2022-47732 - Vulnerability Details - OpenCVE

In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Yeastar	N412 N412 Firmware N824 N824 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:yeastar:n824_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:yeastar:n824:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:yeastar:n412_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:yeastar:n412:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/
https://www.yeastar.com/n-series-analog-phone-system/

History

Thu, 03 Apr 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-01-20T00:00:00.000Z

Updated: 2025-04-03T15:46:39.550Z

Reserved: 2022-12-21T00:00:00.000Z

Link: CVE-2022-47732

Vulnrichment

Updated: 2024-08-03T15:02:36.438Z

NVD

Status : Modified

Published: 2023-01-20T17:15:10.880

Modified: 2025-04-03T16:15:29.730

Link: CVE-2022-47732

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-47732", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-04-03T15:46:39.550Z", "dateReserved": "2022-12-21T00:00:00.000Z", "datePublished": "2023-01-20T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-01-20T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.yeastar.com/n-series-analog-phone-system/"}, {"url": "https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:02:36.438Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.yeastar.com/n-series-analog-phone-system/", "tags": ["x_transferred"]}, {"url": "https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-916", "lang": "en", "description": "CWE-916 Use of Password Hash With Insufficient Computational Effort"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-03T15:46:05.912431Z", "id": "CVE-2022-47732", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T15:46:39.550Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.yeastar.com/n-series-analog-phone-system/", "tags": ["x_transferred"]}, {"url": "https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:02:36.438Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-47732", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-03T15:46:05.912431Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-916", "description": "CWE-916 Use of Password Hash With Insufficient Computational Effort"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T15:46:34.353Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://www.yeastar.com/n-series-analog-phone-system/"}, {"url": "https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/"}], "descriptions": [{"lang": "en", "value": "In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-01-20T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-47732", "state": "PUBLISHED", "dateUpdated": "2025-04-03T15:46:39.550Z", "dateReserved": "2022-12-21T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-01-20T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:yeastar:n824_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5E3C0C40-FF41-4FA7-9D1A-5CC26CE703EE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:yeastar:n824:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CAA0551-5F64-4039-985C-264AE0BCF624", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:yeastar:n412_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "70CF7C44-A1C9-4452-BF18-F6DCF6923597", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:yeastar:n412:-:*:*:*:*:*:*:*", "matchCriteriaId": "94B68D27-784F-4B18-BAC4-3A4AC7F16249", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device."}, {"lang": "es", "value": "En Yeastar N412 y N824 Configuration Panel 42.x y 45.x, un atacante no autenticado puede crear un archivo de respaldo y descargarlo, revelando el hash de administrador, permitiendo, una vez descifrado, iniciar sesi\u00f3n dentro del Panel de configuraci\u00f3n; de lo contrario, reemplazando el hash en el archivo. y restaurarlo en el dispositivo, lo que cambiar\u00e1 la contrase\u00f1a de administrador y otorgar\u00e1 acceso al dispositivo."}], "id": "CVE-2022-47732", "lastModified": "2025-04-03T16:15:29.730", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-01-20T17:15:10.880", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/"}, {"source": "cve@mitre.org", "tags": ["Product", "Vendor Advisory"], "url": "https://www.yeastar.com/n-series-analog-phone-system/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Vendor Advisory"], "url": "https://www.yeastar.com/n-series-analog-phone-system/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-916"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-916"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}