Vulnerabilities > Schneider Electric > Hmibscea53D1Edl Firmware > High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-09	CVE-2022-22807	Unspecified vulnerability in Schneider-Electric products A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. network low complexity schneider-electric	7.4
2022-02-09	CVE-2022-22808	Unspecified vulnerability in Schneider-Electric products A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. network low complexity schneider-electric	8.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.