CVE-2022-2302

Description

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Affected Platforms

Weakness Type

CWE-304, CWE-287

References

• https://cert.vde.com/en/advisories/VDE-2022-030/
• https://cert.vde.com/en/advisories/VDE-2022-030/