ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-3073

—
CVSS 3.1
6.1 medium
EPSS
<1%p38
Published
()
Modified
Description

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.

Vendors
weidmueller
Products
19 iot md01 lan h4 s0011 firmware, fp iot md01 4eu s2 00000 firmware, fp iot md01 lan s2 00000 firmware, fp iot md01 lan s2 00011 firmware, fp iot md02 4eu s3 00000 firmware, iot-gw30 firmware, iot-gw30-4g-eu firmware, uc20-wl2000-ac firmware, uc20-wl2000-iot firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.