Skip to content
OpenAdvisories
High · 8.0 CVE-2022-32747 EUVD-2022-35813GHSA-75hv-856g-q3wx

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilita…

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure™ Cybersecurity Admin Expert (CAE) Category: ICS / OT

Description

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ Cybersecurity Admin Expert (CAE) All – < 2.2 2.2

Advisories 1

References