CVE-2022-43378

published 2023-04-18

CVE-2022-43378: A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended…

Priority P4 31 medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I H A N

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that
could cause the user to be tricked into performing unintended actions when external address
frames are not properly restricted.

Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0

and prior)

Affected

6 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	netbotz_355_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_450_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_455_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_550_firmware	4.0.0 – 4.7.0	—
schneider-electric	netbotz_570_firmware	4.0.0 – 4.7.0	—
schneider_electric	netbotz_4_355_450_455_550_570	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1021