CVE-2022-2302

Summary

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Affected Software

VendorProductVersion RangeStatus
LENZEcabinet c520V01.07.00.2757 < V01.08.01.3021affected
LENZEcabinet c550V01.07.00.2757 < V01.08.01.3021affected
LENZEcabinet c750V01.07.00.2757 < V01.08.01.3021affected

Weaknesses

  • CWE-304: CWE-304 Missing Critical Step in Authentication

ADP Enrichment

CVE Program Container

Additional References

References