Schneider Electric Netbotz 570 Firmware vulnerabilities

3 CVEs affecting Schneider Electric Netbotz 570 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43378, published 2023-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-43377, published 2023-04-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected…
CVE-2022-43378, published 2023-04-18. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames…
CVE-2022-43376, published 2023-04-18. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause code and session manipulation when malicious code is inserted…