Schneider-electric

Ecostruxure Cybersecurity Admin Expert

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2026-14354

  • EPSS 0.12%
  • Veröffentlicht 29.07.2026 11:54:46
  • Zuletzt bearbeitet 30.07.2026 16:43:03

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weakne...

8.1

CVE-2022-32747

  • EPSS 0.31%
  • Veröffentlicht 30.01.2023 23:15:11
  • Zuletzt bearbeitet 21.11.2024 07:06:52

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cyberse...

8.3

CVE-2022-32748

  • EPSS 0.14%
  • Veröffentlicht 30.01.2023 23:15:11
  • Zuletzt bearbeitet 21.11.2024 07:06:53

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to ...