Lucene search

PRIOn knowledge basePRION:CVE-2022-43378

HistoryApr 18, 2023 - 9:15 p.m.

Design/Logic Flaw

2023-04-1821:15:00

PRIOn knowledge base

www.prio-n.com

cwe-1021

logic flaw

rendered ui

frames vulnerability

netbotz 4

address frames

unintended actions

security issue

affected products

nvd

external addresses

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that
could cause the user to be tricked into performing unintended actions when external address
frames are not properly restricted.

Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0

and prior)

CPENameOperatorVersion
netbotz_355_firmwarege4.0.0
netbotz_355_firmwarele4.7.0
netbotz_450_firmwarege4.0.0
netbotz_450_firmwarele4.7.0
netbotz_455_firmwarege4.0.0
netbotz_455_firmwarele4.7.0
netbotz_550_firmwarege4.0.0
netbotz_550_firmwarele4.7.0
netbotz_570_firmwarege4.0.0
netbotz_570_firmwarele4.7.0

Name	Operator	Version
netbotz_355_firmware	ge	4.0.0
netbotz_355_firmware	le	4.7.0
netbotz_450_firmware	ge	4.0.0
netbotz_450_firmware	le	4.7.0
netbotz_455_firmware	ge	4.0.0
netbotz_455_firmware	le	4.7.0
netbotz_550_firmware	ge	4.0.0
netbotz_550_firmware	le	4.7.0
netbotz_570_firmware	ge	4.0.0
netbotz_570_firmware	le	4.7.0

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf