Improper UI Layer Restrictions in Conext ComBox by Schneider Electric

CVE-2022-32517

What is CVE-2022-32517?

An improper restriction of rendered UI layers or frames vulnerability exists in the Conext ComBox, enabling potential attackers to exploit the system's interface. This flaw may allow malicious actors to manipulate how the application's user interface is presented to users, potentially tricking them into unintended interactions with the application. As the product doesn't enforce necessary restrictions on rendering content from external sources, users may be exposed to a range of security risks that could compromise the integrity and confidentiality of their operations.

References