TI-2022-02125 CVE-2022-2302 · GHSA-78pc-4xg6-x467
LENZE: Missing password verification in authorisation procedure
Priority MEDIUM 46
Multiple Lenze products of the cabinet series skip the password verification upon second login.
No Lenze vulnerabilities are listed in CISA KEV.
3 records
Multiple Lenze products of the cabinet series skip the password verification upon second login.
Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism.
A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special condition…