CVE-2022-43377
First published: Tue Apr 18 2023(Updated: )
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior)
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Netbotz 355 Firmware | >=4.0.0<=4.7.0 | |
| Schneider-electric Netbotz 355 | ||
| Schneider-electric Netbotz 450 Firmware | >=4.0.0<=4.7.0 | |
| Schneider-electric Netbotz 450 | ||
| Schneider-electric Netbotz 455 Firmware | >=4.0.0<=4.7.0 | |
| Schneider-electric Netbotz 455 | ||
| Schneider-electric Netbotz 550 Firmware | >=4.0.0<=4.7.0 | |
| Schneider-electric Netbotz 550 | ||
| Schneider-electric Netbotz 570 Firmware | >=4.0.0<=4.7.0 | |
| Schneider-electric Netbotz 570 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-43377.
What is the title of the vulnerability?
The title of the vulnerability is A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could…
What is the severity of CVE-2022-43377?
The severity of CVE-2022-43377 is high with a CVSS score of 7.5.
Which products are affected by CVE-2022-43377?
The affected products are NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior).
How can CVE-2022-43377 be exploited?
CVE-2022-43377 can be exploited through a brute force attack on the account, causing account takeover.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/event
- agent/first-publish-date
- agent/description
- agent/tags
- agent/source
- vendor/schneider-electric
- canonical/schneider-electric netbotz 355 firmware
- version/schneider-electric netbotz 355 firmware/4.0.0
- version/schneider-electric netbotz 355 firmware/4.7.0
- canonical/schneider-electric netbotz 355
- canonical/schneider-electric netbotz 450 firmware
- version/schneider-electric netbotz 450 firmware/4.0.0
- version/schneider-electric netbotz 450 firmware/4.7.0
- canonical/schneider-electric netbotz 450
- canonical/schneider-electric netbotz 455 firmware
- version/schneider-electric netbotz 455 firmware/4.0.0
- version/schneider-electric netbotz 455 firmware/4.7.0
- canonical/schneider-electric netbotz 455
- canonical/schneider-electric netbotz 550 firmware
- version/schneider-electric netbotz 550 firmware/4.0.0
- version/schneider-electric netbotz 550 firmware/4.7.0
- canonical/schneider-electric netbotz 550
- canonical/schneider-electric netbotz 570 firmware
- version/schneider-electric netbotz 570 firmware/4.0.0
- version/schneider-electric netbotz 570 firmware/4.7.0
- canonical/schneider-electric netbotz 570