CVE-2022-30233
Assigner: schneider
Published: 2022-05-10T00:00:00
State: PUBLISHED
affected: product: Wiser Smart 
vendor: Schneider Electric
versions: lessThan: 4.5
status: affected
version: EER21000
versionType: custom
lessThan: 4.5
status: affected
version: EER21001
versionType: custom
datePublic: 2022-05-10T00:00:00
descriptions: value: A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when the user is tricked into performing certain actions on a webpage. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9