CVE-2022-32520

CRITICAL 9.8CVE-2022-32520 · Published 30/01/2023 · updated 17/06/2026

In short

CVE-2022-32520 is a CRITICAL (CVSS 9.8) vulnerability affecting data center expert (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.0% of all vulnerabilities.
Fix: update to 7.9.0 or later.

Package	Affected versions	Patched versions
data center expert schneider-electric	`< 7.9.0`	`7.9.0`

Description

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert (Versions prior to V7.9.0)

References

download.schneider-electric.com/files · Patch

More vulnerabilities in data center expert

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free