CVEvulnerability

CVE-2022-3083

5.4 MEDIUM Published 2023-02-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.9 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Weaknesses
CWE-565, CWE-784

Description

All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.

Affected configurations

• landisgyr e850 firmware

Related

Weakness · CWE (2)

  • CWE-565 Reliance on Cookies without Validation and Integrity Checking weakness
  • CWE-784 Reliance on Cookies without Validation and Integrity Checking in a Security Decision weakness

References