Schneider Electric Conext ComBox
Approved changes feed: RSS · Atom
cpe:2.3:h:schneider-electric:conext_combox:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Conext Combox (53b46f97-2a0c-5773-bfe9-0fe56269cdd0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-32517 |
not_vulnerable | 2026-06-08 05:44:44.910697 |
Details available
MEDIUM (6.5)
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames on external addresses. Affected Products: Conext™ ComBox (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:08:16.694Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32516 |
not_vulnerable | 2026-06-08 05:44:44.910089 |
Details available
HIGH (7.5)
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:08:26.260Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32515 |
not_vulnerable | 2026-06-08 05:44:44.908415 |
Details available
HIGH (8.6)
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account when the product does not implement a rate limit mechanism on the admin authentication form. Affected Products: Conext™ ComBox (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:08:34.356Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22798 |
not_vulnerable | 2026-06-08 05:30:01.461855 |
Details available
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login credentials being exposed when a Network is sniffed. Affected Product: Conext� ComBox (All Versions)
Published: 2022-02-11T17:40:33.000Z
Updated: 2024-08-03T18:51:07.423Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.