Conext Combox Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-30	CVE-2022-32515	Unspecified vulnerability in Schneider-Electric Conext Combox Firmware A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account when the product does not implement a rate limit mechanism on the admin authentication form. network low complexity schneider-electric critical	9.8
2023-01-30	CVE-2022-32516	Unspecified vulnerability in Schneider-Electric Conext Combox Firmware A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). network low complexity schneider-electric	6.5
2023-01-30	CVE-2022-32517	Unspecified vulnerability in Schneider-Electric Conext Combox Firmware A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames on external addresses. network low complexity schneider-electric	6.5
2022-02-11	CVE-2021-22798	Unspecified vulnerability in Schneider-Electric Conext Combox Firmware A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login credentials being exposed when a Network is sniffed. network low complexity schneider-electric	7.5