CVE-2022-2302

creationtimestamp| type| source ---|---|--- 2022-07-11 14:19:08+00:00| seen| Telegram/6ZvSPDsuNOqfWnwaRLtIjHFVVoDRkuLCcZ-4AGtZnPM1Zw...

CVE-2022-2302 LENZE: Missing password verification in authorisation procedure

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password...

CVE-2022-2302

CVE-2022-2302 affects Lenze cabinet series (c520, c550, c750) with firmware versions V01.07.00.2757 through V01.08.01.3021. The root cause is skipping password verification during second login, allowing a remote attacker who has an authenticated session to gain full access without knowing the pas...