CVE-2022-43378: Schneider Electric Netbotz 355 Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior)

Affected products

• Schneider Electric Netbotz 355 Firmware: from 4.0.0, up to and including 4.7.0
• Schneider Electric Netbotz 450 Firmware: from 4.0.0, up to and including 4.7.0
• Schneider Electric Netbotz 455 Firmware: from 4.0.0, up to and including 4.7.0
• Schneider Electric Netbotz 550 Firmware: from 4.0.0, up to and including 4.7.0
• Schneider Electric Netbotz 570 Firmware: from 4.0.0, up to and including 4.7.0

Published 2023-04-18. Last modified 2026-06-17.