CVE-2022-22808

🗓️ 09 Feb 2022 00:00:00Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 81 Views

CVE-2022-22808: CSRF vulnerability in EcoStruxure EV Charging Exper

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-22808	9 Feb 202223:15	–	attackerkb
Circl	CVE-2022-22808	24 Nov 202323:37	–	circl
CNNVD	Schneider Electric EcoStruxure EV Charging Expert 跨站请求伪造漏洞	9 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-22808	9 Feb 202200:00	–	cvelist
EUVD	EUVD-2022-27951	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22808	9 Feb 202223:15	–	nvd
OSV	CVE-2022-22808	9 Feb 202223:15	–	osv
Prion	Cross site request forgery (csrf)	9 Feb 202223:15	–	prion
Positive Technologies	PT-2022-15690 · Schneider Electric · Ecostruxure Ev Charging Expert	9 Feb 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-22808	23 May 202500:42	–	redhatcve

NVD

Node

schneider-electric hmibscea53d1edb_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edbMatch-

Node

schneider-electric hmibscea53d1eds_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edsMatch-

Node

schneider-electric hmibscea53d1edm_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edmMatch-

Node

schneider-electric hmibscea53d1edl_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1edlMatch-

Node

schneider-electric hmibscea53d1ess_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1essMatch-

Node

schneider-electric hmibscea53d1esm_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1esmMatch-

Node

schneider-electric hmibscea53d1eml_firmwareRange<4.0.0.13

AND

schneider-electric hmibscea53d1emlMatch-

[
  {
    "vendor": "n/a",
    "product": "EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)",
    "versions": [
      {
        "version": "EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 06:47Current

8.8High risk

Vulners AI Score8.8

CVSS 26.8

CVSS 3.18.8

EPSS0.0013

CWE-352