CVE-2022-33202

HIGH

L2Blocker < 4.8.6 - Authentication Bypass via Alternative Path

Title source: llm

Description

Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative paths or channels for Sensor.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://www.softcreate.co.jp/news/detail/210

Third Party Advisory x_refsource_misc

https://jvn.jp/en/jp/JVN51464799/index.html

Scores

CVSS v3 8.1

EPSS 0.0038

EPSS Percentile 29.6%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE

CWE-287

Status published

Products (1)

softcreate/l2blocker < 4.8.6 (2 CPE variants)

Published Jun 27, 2022

Tracked Since Feb 18, 2026