Skip to content
OpenAdvisories
High · 7.6 CVE-2022-43376 EUVD-2022-46415GHSA-2mxh-qvf4-48jc

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause code a…

Published Apr 18, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: NetBotz 4 - 355/450/455/550/570 Category: ICS / OT

Description

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting') vulnerability exists that could cause code and session manipulation when malicious
code is inserted into the browser.

Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0

and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior —

Advisories 1

References