First published: Tue Apr 18 2023(Updated: )
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior)
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider Electric NetBotz 355 Firmware | >=4.0.0<=4.7.0 | |
Schneider Electric NetBotz 355 | ||
Schneider Electric NetBotz 450 Firmware | >=4.0.0<=4.7.0 | |
Schneider-electric Netbotz 450 Firmware | ||
Schneider Electric NetBotz 455 Firmware | >=4.0.0<=4.7.0 | |
Schneider-electric Netbotz 455 Firmware | ||
Schneider-electric Netbotz 550 Firmware | >=4.0.0<=4.7.0 | |
Schneider-electric Netbotz 550 Firmware | ||
NetBotz 570 | >=4.0.0<=4.7.0 | |
Schneider Electric NetBotz 570 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2022-43378.
The CWE ID of this vulnerability is CWE-1021.
The severity of CVE-2022-43378 is medium.
The affected products are NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior).
To fix CVE-2022-43378, update to a version of NetBotz 4 firmware that is higher than 4.7.0.