critical9.8
CVE-2022-2302
Multiple Lenze products of the cabinet series skip the password verification upon second login.
Impact
Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenze | C520 Firmware | from 1.07.00.2757 before 01.08.01.3021 |
| Lenze | C550 Firmware | from 1.07.00.2757 before 01.08.01.3021 |
| Lenze | C750 Firmware | from 1.07.00.2757 before 01.08.01.3021 |