CVE-2022-30238
8.3HIGHA CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21
Publicado: 6/2/2022Actualizado: 11/21/2024
Descripción
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Análisis IAImpulsado por IA
Productos Afectados
schneider-electricwiser_smart_eer21000_firmware
schneider-electricwiser_smart_eer21000
-
schneider-electricwiser_smart_eer21001_firmware
schneider-electricwiser_smart_eer21001
-
Referencias
- https://www.se.com/ww/en/download/document/SEVD-2022-130-03/MitigationVendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2022-130-03/MitigationVendor Advisory