Skip to content
OpenAdvisories
High · 8.0 CVE-2022-32518 EUVD-2022-35589GHSA-x4m4-rgq3-wf3x

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed …

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Data Center Expert Category: ICS / OT

Description

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32520. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Affected products

VendorProductAffectedFixed
Schneider Electric Data Center Expert All – < V7.9.0 V7.9.0

Advisories 1

References