CVE-2022-33202

HIGH 8.1CVE-2022-33202 · Published 27/06/2022 · updated 17/06/2026

In short

CVE-2022-33202 is a HIGH (CVSS 8.1) vulnerability affecting l2blocker (softcreate).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.7% of all vulnerabilities.
Fix: update to 4.8.6 or later.

Package	Affected versions	Patched versions
l2blocker softcreate	`< 4.8.6`	`4.8.6`

Description

Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative paths or channels for Sensor.

References

jvn.jp/en/jp/JVN51464799/index.html · Third Party Advisory
softcreate.co.jp/news/detail/210 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free