CVE-2022-32747
A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)
- Score
- CVSS 3.1 8.1 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2023-01-30
- Last modified
- 2025-02-05
- Weaknesses
- CWE-290
Affected products
- Ecostruxure Cybersecurity Admin Expert (Schneider-electric)
- Ecostruxure Cybersecurity Admin Expert Cae (Schneider Electric)
References
- https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cyber…
