Vulnerability · Published Feb 1, 2023 · Assigned by icscert
CVE-2022-3083
Low 3.9
In plain English
A low-severity security flaw in E850 (ZMQ200) from Landis+Gyr. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)3.9Low
Exploit odds (30 days)0.4%top 70.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Landis+Gyr | E850 (ZMQ200) | All |
Weakness: CWE-784 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07 government-resource