Vulnerabilities

TI-2022-14294 CVE-2022-32748 · GHSA-8jc9-jhmw-r737

Improper certificate validation in Schneider Electric EcoStruxure™ Cybersecurity Admin…

LOW 37

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.0014 Published 2023-01-30 Fixed in 2.2 CWE-295

TI-2022-14293 CVE-2022-32747 · GHSA-75hv-856g-q3wx

Authentication bypass by spoofing in Schneider Electric EcoStruxure™ Cybersecurity Admin…

LOW 37

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00311 Published 2023-01-30 Fixed in 2.2 CWE-290

Vulnerabilities

Filters

Improper certificate validation in Schneider Electric EcoStruxure™ Cybersecurity Admin…

Authentication bypass by spoofing in Schneider Electric EcoStruxure™ Cybersecurity Admin…