CVE-2022-2302: Lenze c520 Firmware

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Affected products

• Lenze c520 Firmware: from 1.07.00.2757, before 01.08.01.3021 (fixed in 01.08.01.3021)
• Lenze c550 Firmware: from 1.07.00.2757, before 01.08.01.3021 (fixed in 01.08.01.3021)
• Lenze c750 Firmware: from 1.07.00.2757, before 01.08.01.3021 (fixed in 01.08.01.3021)

Published 2022-07-11. Last modified 2026-06-17.