Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-2302

LENZE: Missing password verification in authorisation procedure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LENZE cabinet c520

  • V01.07.00.2757 to < V01.08.01.3021affected

LENZE cabinet c550

  • V01.07.00.2757 to < V01.08.01.3021affected

LENZE cabinet c750

  • V01.07.00.2757 to < V01.08.01.3021affected

References