← Database

CVE-2022-22808

HIGH CVSS: 8.8 Published: 2022-02-09 Modified: 2026-06-17

Description

A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)

Affected Platforms

Schneider-Electric Hmibscea53D1Esm FirmwareSchneider-Electric Hmibscea53D1EdmSchneider-Electric Hmibscea53D1EdlSchneider-Electric Hmibscea53D1Edb FirmwareSchneider-Electric Hmibscea53D1EmlSchneider-Electric Hmibscea53D1EssSchneider-Electric Hmibscea53D1EdbSchneider-Electric Hmibscea53D1Ess FirmwareSchneider-Electric Hmibscea53D1Eml FirmwareSchneider-Electric Hmibscea53D1Edm Firmware

Weakness Type

CWE-352, CWE-352

References