CVE-2022-32747

ALTO 8.1CVE-2022-32747 · Published 30/01/2023 · updated 17/06/2026

En resumen

CVE-2022-32747 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a ecostruxure cybersecurity admin expert (schneider-electric).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.31%, mayor que el 24.0% de las vulnerabilidades.
Solución: actualizar a 2.4 o posterior.

Package	Affected versions	Patched versions
ecostruxure cybersecurity admin expert schneider-electric	`< 2.4`	`2.4`

Description

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

References

download.schneider-electric.com/files · Patch

Más vulnerabilidades de ecostruxure cybersecurity admin expert

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free