ICSA-23-026-07

icsaUScisa_csaf_ot

Landis+Gyr E850

view advisory published 2023-01-26

Successful exploitation of this vulnerability could cause a denial-of-service condition for the end user that the cookie was modified for.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-3083USmedium5.4—
All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the val…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationE850 (ZMQ200)

    Landis+Gyr has fixed this vulnerability and recommends users update to the latest version. For information on how to obtain this update, users should reach out to Landis+Gyr support.

    https://www.landisgyr.com/contact-2/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan