Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2022-22808

Published: 09/02/2022 Updated: 02/02/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 606
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Schneider-electric

Vulnerability Summary

A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote malicious user to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

schneider-electric hmibscea53d1edb_firmware

schneider-electric hmibscea53d1eds_firmware

schneider-electric hmibscea53d1edm_firmware

schneider-electric hmibscea53d1edl_firmware

schneider-electric hmibscea53d1ess_firmware

schneider-electric hmibscea53d1esm_firmware

schneider-electric hmibscea53d1eml_firmware

References

CWE-352https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-02https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook