NetSight
IP …
high8.8

CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface.

Impact

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

Affected products

VendorProductAffected versions
Siemens6gk6108-4am00-2ba2 Firmware
before 7.1.2
Siemens6gk6108-4am00-2da2 Firmware
before 7.1.2
Siemens6gk5804-0ap00-2aa2 Firmware
before 7.1.2
Siemens6gk5812-1aa00-2aa2 Firmware
before 7.1.2
Siemens6gk5812-1ba00-2aa2 Firmware
before 7.1.2
Siemens6gk5816-1aa00-2aa2 Firmware
before 7.1.2
Siemens6gk5816-1ba00-2aa2 Firmware
before 7.1.2
Siemens6gk5826-2ab00-2ab2 Firmware
before 7.1.2
Siemens6gk5874-2aa00-2aa2 Firmware
before 7.1.2
Siemens6gk5874-3aa00-2aa2 Firmware
before 7.1.2
Siemens6gk5876-3aa02-2ba2 Firmware
before 7.1.2
Siemens6gk5876-3aa02-2ea2 Firmware
before 7.1.2

Weakness classification

CWE-862

References