Schneider Electric Wiser Smart Improper Restriction of Excessive Authentication Attempts (CVE-2022-30235)

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior This plugin only works with Tenable.ot. Please visit...

CVE-2022-30235

CVE-2022-30235 applies to Schneider Electric Wiser Smart and related EER21000/EER21001 devices (V4.5 and earlier). The vulnerability is CWE-307: Improper Restriction of Excessive Authentication Attempts, enabling brute‑force-style unauthorized access. The evidence indicates a network-based risk w...