CVE-2022-30238
8.3HIGHA CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21
Опубликовано: 6/2/2022Обновлено: 11/21/2024
Описание
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
ИИ-АнализНа базе ИИ
Затронутые продукты
schneider-electricwiser_smart_eer21000_firmware
schneider-electricwiser_smart_eer21000
-
schneider-electricwiser_smart_eer21001_firmware
schneider-electricwiser_smart_eer21001
-
Ссылки
- https://www.se.com/ww/en/download/document/SEVD-2022-130-03/MitigationVendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2022-130-03/MitigationVendor Advisory