The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-22987
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-032-02