PT-2022-6688 · Netbotz 4 · Netbotz 4

Published 2022-11-08 · Updated 2023-04-27 · CVE-2022-43378

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions NetBotz 4 versions 4.7.0 and prior

Description A vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. This issue is related to improper restriction of rendered UI layers or frames, which may allow a remote attacker to impact data integrity.

Recommendations For NetBotz 4 versions 4.7.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

BDU:2023-03403

CVE-2022-43378

Affected Products

Netbotz 4

References · 6

• https://bdu.fstec.ru/vul/2023-03403 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43378 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43378 · Vendor Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf · Note
• https://vuldb.com/es/?id.226790 · Note