Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-09	CVE-2022-22809	Unspecified vulnerability in Schneider-Electric products A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. network low complexity schneider-electric	5.3
2022-02-09	CVE-2022-22812	Unspecified vulnerability in Schneider-Electric products A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. network low complexity schneider-electric	6.1