Skip to content
Sign in
8.0 High

CVE-2022-32747 A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out…

Description

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Affected products and versions

Product Affected versions Fixed in
EcoStruxure™ Cybersecurity Admin Expert (CAE) 2.2 earliest → < 2.2 2.2

Other CVEs of EcoStruxure™ Cybersecurity Admin Expert (CAE)

The 2 CVEs of EcoStruxure™ Cybersecurity Admin Expert (CAE) →
CVE-2022-32748 A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data… 7.9 High
Track this CVE