medium6.5
CVE-2022-43378
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended action…
Impact
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Netbotz 355 Firmware | from 4.0.0 through 4.7.0 |
| Schneider-Electric | Netbotz 450 Firmware | from 4.0.0 through 4.7.0 |
| Schneider-Electric | Netbotz 455 Firmware | from 4.0.0 through 4.7.0 |
| Schneider-Electric | Netbotz 550 Firmware | from 4.0.0 through 4.7.0 |
| Schneider-Electric | Netbotz 570 Firmware | from 4.0.0 through 4.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf