CVE:CVE-2022-22807
CNNVD:CNNVD-202202-896
EcoStruxure EV Charging Expert是法国施耐德（Schneider-electric）的电动汽车充电基础设施负载管理、访问管理和监督解决方案。
EcoStruxure EV Charging Expert存在安全漏洞，该漏洞源于当欺骗用户使用在iframes中渲染的web界面时，CWE-1021渲染UI层或框架的不当限制存在可能导致产品设置或用户帐户的意外修改。
solution:Upgrade schneider-electric hmibscea53d1edb_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13); Upgrade schneider-electric hmibscea53d1eds_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13); Upgrade schneider-electric hmibscea53d1edm_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13); Upgrade schneider-electric hmibscea53d1edl_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13); Upgrade schneider-electric hmibscea53d1ess_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13); Upgrade schneider-electric hmibscea53d1esm_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13); Upgrade schneider-electric hmibscea53d1eml_firmware to a higher version than 4.0.0.13,and avoid the version (,4.0.0.13)