Improper Restriction of Excessive Authentication Attempts in Wiser Smart by Schneider Electric

CVE-2022-30235

What is CVE-2022-30235?

An issue exists in Wiser Smart that allows attackers to exploit improper restrictions on authentication attempts, facilitating unauthorized access through brute force methods. This vulnerability primarily affects EER21000 and EER21001 models running version V4.5 or earlier. Organizations using these devices should take immediate action to mitigate potential security risks associated with this flaw.

References