Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-22807

Quick assessment

Affected
n/a EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

EcoStruxure EV Charging Expert是法国施耐德（Schneider-electric）的电动汽车充电基础设施负载管理、访问管理和监督解决方案。 EcoStruxure EV Charging Expert存在安全漏洞，该漏洞源于当欺骗用户使用在iframes中渲染的web界面时，CWE-1021渲染UI层或框架的不当限制存在可能导致产品设置或用户帐户的意外修改。

AI Predicted 5.4 Difficulty: Moderate EPSS 0.94% · P60

Possible ATT&CK Techniques 1 AI

T1566.002 · Spearphishing Link
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-22807

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
不当限制渲染UI层或帧
Source: CVE Program / CVE List V5
Vulnerability Title
EcoStruxure EV Charging Expert 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EcoStruxure EV Charging Expert是法国施耐德（Schneider-electric）的电动汽车充电基础设施负载管理、访问管理和监督解决方案。 EcoStruxure EV Charging Expert存在安全漏洞，该漏洞源于当欺骗用户使用在iframes中渲染的web界面时，CWE-1021渲染UI层或框架的不当限制存在可能导致产品设置或用户帐户的意外修改。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13) EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13) -

II. Public POCs for CVE-2022-22807

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-22807

请登录查看更多情报信息。

Other References for CVE-2022-22807 (1)

Same Patch Batch · n/a · 2022-02-09 · 115 CVEs total

CVE-2021-33114 Intel PROSet/Wireless WiFi Software 输入验证错误漏洞
CVE-2022-21204 Intel Quartus Prime Pro 权限许可和访问控制问题漏洞
CVE-2022-21156 Intel Trace Analyzer And Collector 缓冲区错误漏洞
CVE-2021-44454 Intel Quartus Prime Pro 输入验证错误漏洞
CVE-2022-21174 Intel Quartus Prime Pro 安全漏洞
CVE-2022-21153 Intel Capital Global Summit Android App 安全漏洞
CVE-2022-21133 Intel Trace Analyzer And Collector 缓冲区错误漏洞
CVE-2021-33155 Intel Wireless Bluetooth 和 Killer Bluetooth 输入验证错误漏洞
CVE-2021-33166 Intel RXT for Chromebook 安全漏洞
CVE-2021-33129 Intel Advisor 安全漏洞
CVE-2021-33139 Intel Wireless Bluetooth 和 Killer Bluetooth 代码问题漏洞
CVE-2021-33137 Intel Kernelflinger 缓冲区错误漏洞
CVE-2021-33147 Intel Integrated Performance Primitives 代码问题漏洞
CVE-2021-33120 Intel Processors BIOS firmware 缓冲区错误漏洞
CVE-2021-33119 Intel RealSense Depth Camera Manager 安全漏洞
CVE-2021-0183 Intel 多款产品输入验证错误漏洞
CVE-2021-33061 Intel 82599 Ethernet Series 安全漏洞
CVE-2021-23152 Intel Advisor 安全漏洞
CVE-2021-0178 Intel 多款产品输入验证错误漏洞
CVE-2021-33101 Intel Graphics Performance Analyzers 代码问题漏洞

Showing top 20 of 115 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
Same vendor: n/a
Same weakness: CWE-1021

V. Comments for CVE-2022-22807

No comments yet

Leave a comment