CVE-2022-32518

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32520. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Score

CVSS 3.1 9.8 Critical

Status

Modified - cybersecurity@se.com

Published

2023-01-30

Last modified

2025-02-05

Weaknesses

CWE-522

Affected products

• Data Center Expert (Schneider-electric)
• Data Center Expert (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-04_+Data…