Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:conext™_combox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductConext™ Combox (97ab1a17-e55a-5e55-b460-b0a4869b9bb6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32517 vulnerable 2026-06-08 05:44:44.910502 Details available
MEDIUM (6.5)
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames on external addresses. Affected Products: Conext™ ComBox (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:08:16.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32516 vulnerable 2026-06-08 05:44:44.908853 Details available
HIGH (7.5)
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:08:26.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32515 vulnerable 2026-06-08 05:44:44.906760 Details available
HIGH (8.6)
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account when the product does not implement a rate limit mechanism on the admin authentication form. Affected Products: Conext™ ComBox (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:08:34.356Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.