CVE-2022-3083

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-01 · updated 2026-06-17
Weakness: CWE-784

Description

All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.

Affected products

Landis+Gyr E850 (ZMQ200): all versions

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07
https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07

Get alerted when CVE-2022-3083 or the next vulnerability affects your stack