CVE-2022-43377

🗓️ 18 Apr 2023 19:56:14Reported by schneiderType

Account takeover vulnerability in NetBotz 4 (V4.7.0 and prior)

Reporter	Title	Published	Views	Family All 7
CNNVD	Schneider Electric NetBotz 安全漏洞	18 Apr 202300:00	–	cnnvd
Cvelist	CVE-2022-43377	18 Apr 202319:56	–	cvelist
EUVD	EUVD-2022-46416	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43377	18 Apr 202320:15	–	nvd
Prion	Authentication flaw	18 Apr 202320:15	–	prion
Positive Technologies	PT-2022-6266 · Netbotz 4 · Netbotz 4	8 Nov 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-43377	18 Apr 202319:56	–	vulnrichment

NVD

Node

schneider-electric netbotz_355_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_355Match-

Node

schneider-electric netbotz_450_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_450Match-

Node

schneider-electric netbotz_455_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_455Match-

Node

schneider-electric netbotz_550_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_550Match-

Node

schneider-electric netbotz_570_firmwareRange4.0.0–4.7.0

AND

schneider-electric netbotz_570Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "NetBotz 4 - 355/450/455/550/570",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "V4.7.0 and prior"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 07:26Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00251

SSVC

CWE-307