CVE-2022-3073: Weidmueller 19 IoT MD01 Lan h4 s0011 Firmware

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.

Affected products

• Weidmueller 19 IoT MD01 Lan h4 s0011 Firmware: affected versions not specified
• Weidmueller Fp IoT MD01 4eu s2 00000 Firmware: affected versions not specified
• Weidmueller Fp IoT MD01 Lan s2 00000 Firmware: affected versions not specified
• Weidmueller Fp IoT MD01 Lan s2 00011 Firmware: affected versions not specified
• Weidmueller Fp IoT MD02 4eu s3 00000 Firmware: affected versions not specified
• Weidmueller IoT-GW30-4g-Eu Firmware: up to and including 1.16.0
• Weidmueller IoT-GW30 Firmware: up to and including 1.16.0
• Weidmueller UC20-WL2000-Ac Firmware: up to and including 1.16.0
• Weidmueller UC20-WL2000-IoT Firmware: up to and including 1.16.0

Published 2022-12-14. Last modified 2026-06-17.