PT-2022-3474 · Schneider Electric · Conext Combox

Published 2022-06-14 · Updated 2023-02-07 · CVE-2022-32516

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Conext ComBox (All Versions)

Description A Cross-Site Request Forgery (CSRF) issue exists, potentially allowing an attacker to override system configurations and cause a reboot loop through a specially crafted POST request. This could lead to a denial of service.

Recommendations For Conext ComBox, consider disabling the ability to accept POST requests from external sources as a temporary workaround until a patch is available. Restrict access to the device's configuration interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2022-04253

CVE-2022-32516

Affected Products

Conext Combox

References · 5

• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-03_ConextCombox_Security_Notification.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04253 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-32516 · Security Note
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-03_ConextCombox_Security_Notification.pdf · Note
• https://t.me/cibsecurity/57174 · Telegram Post