Schneider Electric HMIBSCEA53D1EDL Firmware vulnerabilities

2 CVEs affecting Schneider Electric HMIBSCEA53D1EDL Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22808, published 2022-02-09.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22807, published 2022-02-09. High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days. A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use…
• CVE-2022-22808, published 2022-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or…