Vulnerabilities

TI-2022-14149 CVE-2022-32514 · GHSA-pg33-hcmh-pwwq

Improper authentication in Schneider Electric C-Bus Network Automation Controller…

MEDIUM 50

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00781 Published 2023-01-30 Fixed in V1.10.0 CWE-287

TI-2022-14148 CVE-2022-32513 · GHSA-g6vq-fv87-p4jp

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker…

MEDIUM 50

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker brute forces the password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00689 Published 2023-01-30 Fixed in V1.10.0 CWE-521

Vulnerabilities

Filters

Improper authentication in Schneider Electric C-Bus Network Automation Controller…

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker…