Data Center Expert (Schneider-electric) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-10-11. Vendor: Schneider-electric.

CVEs of Data Center Expert

• CVE-2024-8531 - CVSS 7.2 (high), 2024-10-11: CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is…
• CVE-2024-8530 - CVSS 5.9 (medium), 2024-10-11: CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures”…
• CVE-2022-32521 - CVSS 8.8 (high), 2023-01-30: A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data…
• CVE-2022-32520 - CVSS 9.8 (critical), 2023-01-30: A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a…
• CVE-2022-32519 - CVSS 9.8 (critical), 2023-01-30: A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network…
• CVE-2022-32518 - CVSS 9.8 (critical), 2023-01-30: A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a…