Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:wiser_smart_eer21001_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductWiser Smart Eer21001 Firmware (788b07ce-7a48-58fe-95d5-953197b53204)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-30238 vulnerable 2026-06-08 05:43:37.736761 Details available
HIGH (8.3)
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Published: 2022-06-02T22:45:25.728Z
Updated: 2024-09-17T03:29:08.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30237 vulnerable 2026-06-08 05:43:37.736362 Details available
HIGH (8.2)
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be recovered when an attacker breaks the encoding. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Published: 2022-06-02T22:45:24.206Z
Updated: 2024-09-17T01:57:03.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30236 vulnerable 2026-06-08 05:43:37.735966 Details available
HIGH (8.2)
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Published: 2022-06-02T22:45:22.767Z
Updated: 2024-09-16T23:00:39.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30235 vulnerable 2026-06-08 05:43:37.735565 Details available
HIGH (8.6)
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Published: 2022-06-02T22:45:21.168Z
Updated: 2024-09-16T17:59:43.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30234 vulnerable 2026-06-08 05:43:37.735113 Details available
CRITICAL (9.4)
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Published: 2022-06-02T22:45:19.768Z
Updated: 2024-09-16T19:04:21.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30233 vulnerable 2026-06-08 05:43:37.733785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.