Conext Combox Firmware (Schneider-electric) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-01-30. Vendor: Schneider-electric.

CVEs of Conext Combox Firmware

• CVE-2022-32517 - CVSS 6.5 (medium), 2023-01-30: A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into…
• CVE-2022-32516 - CVSS 7.5 (high), 2023-01-30: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product…
• CVE-2022-32515 - CVSS 9.8 (critical), 2023-01-30: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account…
• CVE-2021-22798 - CVSS 7.5 (high), 2022-02-11: A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login credentials being exposed when a Network is…