CVE-2022-22807
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
Published:Feb 9, 2022
Last Modified:Nov 21, 2024
EPS:Feb 9, 2022
EPSS Score:0.00206
CVSS Score:7.4
Affected Products
Vendor
Product
Action
Vendor
Schneider-electric
Product
Hmibscea53d1edb
Schneider-electric
Hmibscea53d1edb
Vendor
Schneider-electric
Product
Hmibscea53d1edb Firmware
Schneider-electric
Hmibscea53d1edb Firmware
Vendor
Schneider-electric
Product
Hmibscea53d1edl
Schneider-electric
Hmibscea53d1edl
Vendor
Schneider-electric
Product
Hmibscea53d1edl Firmware
Schneider-electric
Hmibscea53d1edl Firmware
Vendor
Schneider-electric
Product
Hmibscea53d1edm
Schneider-electric
Hmibscea53d1edm
Vendor
Schneider-electric
Product
Hmibscea53d1edm Firmware
Schneider-electric
Hmibscea53d1edm Firmware
Vendor
Schneider-electric
Product
Hmibscea53d1eds
Schneider-electric
Hmibscea53d1eds
Vendor
Schneider-electric
Product
Hmibscea53d1eds Firmware
Schneider-electric
Hmibscea53d1eds Firmware
Vendor
Schneider-electric
Product
Hmibscea53d1eml
Schneider-electric
Hmibscea53d1eml
Vendor
Schneider-electric
Product
Hmibscea53d1eml Firmware
Schneider-electric
Hmibscea53d1eml Firmware
Vendor
Schneider-electric
Product
Hmibscea53d1esm
Schneider-electric
Hmibscea53d1esm
Vendor
Schneider-electric
Product
Hmibscea53d1esm Firmware
Schneider-electric
Hmibscea53d1esm Firmware
Vendor
Schneider-electric
Product
Hmibscea53d1ess
Schneider-electric
Hmibscea53d1ess
Vendor
Schneider-electric
Product
Hmibscea53d1ess Firmware
Schneider-electric
Hmibscea53d1ess Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
