High severity7.5NVD Advisory· Published Apr 18, 2023· Updated Jun 17, 2026
CVE-2022-43377
CVE-2022-43377
Description
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account.
Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0
and prior)
Affected products
7- cpe:2.3:o:schneider-electric:netbotz_355_firmware:*:*:*:*:*:*:*:*Range: >=4.0.0,<=4.7.0
- cpe:2.3:o:schneider-electric:netbotz_450_firmware:*:*:*:*:*:*:*:*Range: >=4.0.0,<=4.7.0
- cpe:2.3:o:schneider-electric:netbotz_455_firmware:*:*:*:*:*:*:*:*Range: >=4.0.0,<=4.7.0
- cpe:2.3:o:schneider-electric:netbotz_550_firmware:*:*:*:*:*:*:*:*Range: >=4.0.0,<=4.7.0
- cpe:2.3:o:schneider-electric:netbotz_570_firmware:*:*:*:*:*:*:*:*Range: >=4.0.0,<=4.7.0
- Schneider Electric/NetBotz 4 - 355/450/455/550/570v5Range: V4.7.0 and prior
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.