CVEvulnerability

CVE-2022-2302

9.8 CRITICAL Published 2022-07-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287, CWE-304

Description

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Affected configurations

• lenze c520 firmware (>= 1.07.00.2757 < 01.08.01.3021) • lenze c550 firmware (>= 1.07.00.2757 < 01.08.01.3021) • lenze c750 firmware (>= 1.07.00.2757 < 01.08.01.3021)

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-304 Missing Critical Step in Authentication weakness

References