Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-30	CVE-2022-32516	Cross-Site Request Forgery (CSRF) vulnerability in Schneider-Electric Conext Combox Firmware A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). network low complexity schneider-electric CWE-352	6.5
2023-01-30	CVE-2022-32517	Improper Restriction of Rendered UI Layers or Frames vulnerability in Schneider-Electric Conext Combox Firmware A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames on external addresses. network low complexity schneider-electric CWE-1021	6.5