PT-2022-6266 · Netbotz 4 · Netbotz 4

Published 2022-11-08 · Updated 2023-04-25 · CVE-2022-43377

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetBotz 4 versions 4.7.0 and prior

Description The issue is related to insufficient restriction of authentication attempts, allowing a remote attacker to bypass security restrictions using a brute force attack. This could lead to account takeover.

Recommendations For NetBotz 4 versions 4.7.0 and prior, consider implementing additional security measures to restrict excessive authentication attempts, such as account lockout policies or rate limiting, to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2023-00681

CVE-2022-43377

Affected Products

Netbotz 4

References · 5

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43377 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43377 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00681 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf · Note