medium6.8
CVE-2022-34754
A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials.
Impact
A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C (A9XELC10-A) (V1.7.5 and prior), Acti9 PowerTag Link C (A9XELC10-B) (V2.12.0 and prior)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Acti9 Powertag Link C \(A9xelc10-A\) Firmware | through 1.7.5 |
| Schneider-Electric | Acti9 Powertag Link C \(A9xelc10-B\) Firmware | through 2.12.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-03_Acti9_PowerTag_Link_C_Security_Notification.pdf
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-03_Acti9_PowerTag_Link_C_Security_Notification.pdf