CVEvulnerability
CVE-2022-43378
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-1021
Description
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that
could cause the user to be tricked into performing unintended actions when external address
frames are not properly restricted.
Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0
and prior)
Affected configurations
• schneider-electric netbotz 355 firmware (>= 4.0.0 <= 4.7.0)
• schneider-electric netbotz 450 firmware (>= 4.0.0 <= 4.7.0)
• schneider-electric netbotz 455 firmware (>= 4.0.0 <= 4.7.0)
• schneider-electric netbotz 550 firmware (>= 4.0.0 <= 4.7.0)
• schneider-electric netbotz 570 firmware (>= 4.0.0 <= 4.7.0)
Related
Weakness · CWE (1)
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf Patch, Vendor Advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf Patch, Vendor Advisory