Skip to content
OpenAdvisories
High · 8.3 CVE-2022-30238 EUVD-2022-35444GHSA-q5fq-xpcr-pwv8

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijack…

Published Jun 2, 2022 · Updated Sep 17, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Wiser Smart Category: ICS / OT

Description

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric Wiser Smart EER21000 – < 4.5, EER21001 – < 4.5 4.5

Advisories 1

References