Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-40178
HistoryFeb 06, 2023 - 12:00 a.m.

Schneider Electric Conext ComBox Cross-Site Request Forgery Vulnerability

2023-02-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
schneider electric
communication device
monitoring
cross-site request forgery
remote attacker
malicious uri
system configuration
cyclic restart
vulnerability
security

0.0005 Low

EPSS

Percentile

16.4%

The Schneider Electric Conext ComBox is a communication and monitoring device from Schneider Electric (France). The Schneider Electric Conext ComBox suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to construct a malicious URI, which induces a request to achieve an override of the system configuration and cause a cyclic restart.

0.0005 Low

EPSS

Percentile

16.4%

Related for CNVD-2023-40178