Vulnerabilities > Schneider Electric > Data Center Expert > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-30 | CVE-2022-32521 | Deserialization of Untrusted Data vulnerability in Schneider-Electric Data Center Expert A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. | 9.8 |
| 2023-01-30 | CVE-2022-32520 | Insufficiently Protected Credentials vulnerability in Schneider-Electric Data Center Expert A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. | 9.8 |
| 2023-01-30 | CVE-2022-32519 | Insufficiently Protected Credentials vulnerability in Schneider-Electric Data Center Expert A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. | 9.8 |
| 2023-01-30 | CVE-2022-32518 | Insufficiently Protected Credentials vulnerability in Schneider-Electric Data Center Expert A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. | 9.8 |