CVE-2022-3083 Vulnerability Details

  /     /     /  

CVE-2022-3083 Metadata Quick Info

CVE Published: 01/02/2023 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: icscert | Vendor: Landis+Gyr | Product: E850 (ZMQ200)
Status : PUBLISHED

---

CVE-2022-3083 Description

All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device\'s web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.

Metrics

CVSS Version: 3.1 | Base Score: 3.9 LOW
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

l➤ Exploitability Metrics:
    Attack Vector (AV)* LOCAL
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* LOW
    User Interaction (UI)* REQUIRED
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* NONE
    Integrity Impact (I)* LOW
    Availability Impact (A)* LOW

Weakness Enumeration (CWE)

CWE-ID: CWE-784
CWE Name: CWE-784 Reliance on Cookies Without Validation and Integrity
Source: Landis+Gyr

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).