CVE-2022-3083 - All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity

Back Back to CVE browser

MEDIUM

All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity

Published Feb 1, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.

Affected products

Vendor Landis+Gyr Product n/a Default
unaffected
- Version
  All
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Landis+Gyr

n/a

unaffected

Version	Status	Constraints
All	affected	-

Remediation

Vendor solution

Landis+Gyr has fixed this vulnerability and recommends users update to the latest version. For information on how to obtain this update, users should reach out to Landis+Gyr support https://www.landisgyr.com/contact-2/ .

Weaknesses (2)

CWE-565

CWE-784

References (1)

https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07
government-resourceThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07		government-resourceThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Feb 1, 2023

Updated Jan 16, 2025

Reserved Sep 1, 2022

Link CVE-2022-3083

CISA Vulnrichment

Updated Jan 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3083

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-3083