VDB

CVE-2022-30238

CVE-2022-30238 PUBLISHED CVSS 8.300000190734863 HIGH

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)

EPSS 0.36% · 58.0th percentile

Risk Scores

CVSS v3.1
8.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
EPSS Score
0.36%
58.0th percentile

Affected Products

VendorProductVersions
schneider-electricwiser_smart_eer21001_firmware0
Schneider ElectricWiser SmartEER21000, EER21001
schneider-electricwiser_smart_eer21000_firmware0

Timeline

  • May 10, 2022 CVE Published
  • Jun 3, 2022 EPSS Score
  • Jul 22, 2022 EPSS Score
  • Aug 22, 2022 CVE Updated
  • Sep 9, 2022 EPSS Score
  • Oct 27, 2022 EPSS Score
  • Dec 15, 2022 EPSS Score
  • Feb 1, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 21, 2023 EPSS Score
  • May 9, 2023 EPSS Score
  • Jun 26, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›