Skip to content
OpenAdvisories
Unscored CVE-2022-33202 EUVD-2022-36245GHSA-mh3g-wmcq-xxrw

Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and ear…

Published Jun 27, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative paths or channels for Sensor.

Affected products

VendorProductAffectedFixed
SOFTCREATE L2Blocker L2Blocker(on-premise) Ver4.8.5 and earlier, and L2Blocker(Cloud) Ver4.8.5 and earlier —

References