CVE-2022-43378

published 2023-04-18

CVE-2022-43378: A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended…

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I H A N

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that
could cause the user to be tricked into performing unintended actions when external address
frames are not properly restricted.

Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0

and prior)

Affected

6 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	netbotz_355_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_450_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_455_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_550_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_570_firmware	4.0.0 – 4.7.0	—
schneider_electric	netbotz_4_355_450_455_550_570	—	—

CWE-1021