← CVE Intelligence

CVE-2022-2302

LENZE: Missing password verification in authorisation procedure PUBLISHED

Description (CNA)

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Affected (CNA)

Vendor / productVersions
LENZE / cabinet c520affected V01.07.00.2757 before V01.08.01.3021
LENZE / cabinet c550affected V01.07.00.2757 before V01.08.01.3021
LENZE / cabinet c750affected V01.07.00.2757 before V01.08.01.3021

CWE

CWE-304

References

ADP enrichment

CVE

No English description supplied.