CVE-2022-22512

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: Mar 23, 2023
Source updated: Feb 25, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

VARTA: Multiple devices prone to hard-coded credentials

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Element backup

Vendor: VARTA Storage
Product: Element backup
Platforms: Unknown
Default status: unaffected

Element backup · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	F21000400	Unavailable	None listed

Element S1

Vendor: VARTA Storage
Product: Element S1
Platforms: Unknown
Default status: unaffected

Element S1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2e.3.8.0	Unavailable	None listed

Element S2

Vendor: VARTA Storage
Product: Element S2
Platforms: Unknown
Default status: unaffected

Element S2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2e.3.8.0	Unavailable	None listed

Element S2

Vendor: VARTA Storage
Product: Element S2
Platforms: Unknown
Default status: unaffected

Element S2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2e.3.8.0	Unavailable	None listed

Element S3

Vendor: VARTA Storage
Product: Element S3
Platforms: Unknown
Default status: unaffected

Element S3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2e.3.8.0	Unavailable	None listed

Element S3

Vendor: VARTA Storage
Product: Element S3
Platforms: Unknown
Default status: unaffected

Element S3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2e.4.4.0	Unavailable	None listed

Element S4

Vendor: VARTA Storage
Product: Element S4
Platforms: Unknown
Default status: unaffected

Element S4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	D21010400	Unavailable	None listed

One L/XL

Vendor: VARTA Storage
Product: One L/XL
Platforms: Unknown
Default status: unaffected

One L/XL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2e.3.8.0	Unavailable	None listed

Pulse (not pulse neo)

Vendor: VARTA Storage
Product: Pulse (not pulse neo)
Platforms: Unknown
Default status: unaffected

Pulse (not pulse neo) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	C21010800	Unavailable	None listed