Schneider-electric ≫ Ecostruxure Cybersecurity Admin Expert
2 Schwachstellen gefunden.
Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1
CVE-2022-32747
- EPSS 0.03%
- Veröffentlicht 30.01.2023 23:15:11
- Zuletzt bearbeitet 21.11.2024 07:06:52
A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cyberse...
8.3
CVE-2022-32748
- EPSS 0.07%
- Veröffentlicht 30.01.2023 23:15:11
- Zuletzt bearbeitet 21.11.2024 07:06:53
A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to ...
1