Skip to content
OpenAdvisories
High · 7.5 CVE-2022-32516 EUVD-2022-35587GHSA-gqgc-w6w9-6h7c

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop…

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Conext™ ComBox Category: ICS / OT

Description

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)

Affected products

VendorProductAffectedFixed
Schneider Electric Conext™ ComBox All Versions —

Advisories 1

References