Hmibscea53D1Ess Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-09	CVE-2022-22807	Improper Restriction of Rendered UI Layers or Frames vulnerability in Schneider-Electric products A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. network low complexity schneider-electric CWE-1021	7.4
2022-02-09	CVE-2022-22808	Cross-Site Request Forgery (CSRF) vulnerability in Schneider-Electric products A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. network low complexity schneider-electric CWE-352	8.8