Ecostruxure Cybersecurity Admin Expert (Schneider-electric) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2023-01-30. Vendor: Schneider-electric.

CVEs of Ecostruxure Cybersecurity Admin Expert

• CVE-2022-32747 - CVSS 8.1 (high), 2023-01-30: A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account…
• CVE-2022-32748 - CVSS 8.3 (high), 2023-01-30: A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure…