Schneider-Electric Ecostruxure™ Cybersecurity Admin Expert (Cae)
2 CVEs affecting Schneider-Electric Ecostruxure™ Cybersecurity Admin Expert (Cae). Latest disclosed: 2023-01-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32747 | High | 8.0 | 2023-01-30 | A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account… |
CVE-2022-32748 | High | 7.9 | 2023-01-30 | A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure d… |