Vulnerabilities > CVE-2022-32748 - Unspecified vulnerability in Schneider-Electric Ecostruxure Cybersecurity Admin Expert 2.2

047910
CVSS 8.3 - HIGH
Attack vector
ADJACENT_NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
high complexity
schneider-electric
NVD
Published: 2023-01-30
Updated: 2024-11-21

Summary

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into the configuration tool and compromise other devices in the network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Vulnerable Configurations

Part Description Count
Application
Schneider-Electric
2

References