| |
Vulnerability CVE-2022-22511
Published: 2022-03-09
| Description: |
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://cert.vde.com/en/advisories/VDE-2022-004/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
