CVE-2022-22807

🗓️ 09 Feb 2022 00:00:00Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 115 Views

CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability in EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System) could allow unintended modifications of product settings or user accounts via iframes. Affected versions: prior to SP8 (Version 01) V4.0.0.1

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-22807	9 Feb 202223:15	–	attackerkb
Circl	CVE-2022-22807	10 Feb 202202:29	–	circl
CNNVD	EcoStruxure EV Charging Expert 安全漏洞	9 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-22807	9 Feb 202200:00	–	cvelist
EUVD	EUVD-2022-27950	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22807	9 Feb 202223:15	–	nvd
Prion	Design/Logic Flaw	9 Feb 202223:15	–	prion
Positive Technologies	PT-2022-6694 · Schneider Electric · Ecostruxure Ev Charging Expert	8 Feb 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-22807	22 May 202523:51	–	redhatcve

NVD

Node

schneider-electric hmibscea53d1edb_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edbMatch-

Node

schneider-electric hmibscea53d1eds_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edsMatch-

Node

schneider-electric hmibscea53d1edm_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edmMatch-

Node

schneider-electric hmibscea53d1edl_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edlMatch-

Node

schneider-electric hmibscea53d1ess_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1essMatch-

Node

schneider-electric hmibscea53d1esm_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1esmMatch-

Node

schneider-electric hmibscea53d1eml_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1emlMatch-

[
  {
    "vendor": "n/a",
    "product": "EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)",
    "versions": [
      {
        "version": "EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)",
        "status": "affected"
      }
    ]
  }
]