IM
IronMonkey Threat Research

CVE-2022-32517 MEDIUM

Published: 2023-01-30 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames on external addresses. Affected Products: Conext™ ComBox (All Versions)

Additional Descriptions (1)

Existe una vulnerabilidad CWE-1021: Restricción inadecuada de las capas o marcos de la interfaz de usuario renderizados que podría causar que un adversario engañe la interfaz user/admin para que interactúe con la aplicación de una manera no deseada cuando el producto no implementa restricciones en la capacidad de renderizar dentro de los marcos. en direcciones externas. Productos afectados: Conext? ComBox (todas las versiones)

CVSS Metrics

Base Score: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactHIGH
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-1021

Affected Products

Vendor Product Version Update Type
schneider-electric conext_combox_firmware * <built-in method update of dict object at 0x7e60bae4a900> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:schneider-electric:conext_combox_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:schneider-electric:conext_combox:-:*:*:*:*:*:*:*
Notification
Message here