CVE-2022-43376

🗓️ 18 Apr 2023 19:55:07Reported by schneiderType

CVE-2022-43376 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit

Reporter	Title	Published	Views	Family All 9
CNNVD	Schneider Electric NetBotz 跨站脚本漏洞	18 Apr 202300:00	–	cnnvd
CNVD	Schneider Electric NetBotz Cross-Site Scripting Vulnerability	21 Apr 202300:00	–	cnvd
Cvelist	CVE-2022-43376	18 Apr 202319:55	–	cvelist
EUVD	EUVD-2022-46415	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43376	18 Apr 202320:15	–	nvd
OSV	CVE-2022-43376	18 Apr 202320:15	–	osv
Prion	Cross site scripting	18 Apr 202320:15	–	prion
Positive Technologies	PT-2022-5354 · Netbotz 4 · Netbotz 4	8 Nov 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-43376	18 Apr 202319:55	–	vulnrichment

NVD

Node

schneider-electric netbotz_355_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_355Match-

Node

schneider-electric netbotz_450_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_450Match-

Node

schneider-electric netbotz_455_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_455Match-

Node

schneider-electric netbotz_550_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_550Match-

Node

schneider-electric netbotz_570_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_570Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "NetBotz 4 - 355/450/455/550/570",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "V4.7.0 and prior"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 07:26Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1 - 7.6

EPSS0.00542

SSVC

CWE-79

cve-2022-43376 cwe-79 netbotz 4 355 450 455 550 570 v4.7.0 nvd code injection session manipulation security vulnerability