Ecostruxure Cybersecurity Admin Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:ecostruxure_cybersecurity_admin_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Ecostruxure Cybersecurity Admin Expert (5977dc02-281f-5ffb-bf5d-4eb4613810de) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-32748 |
vulnerable | 2026-06-08 05:44:45.737333 |
Details available
HIGH (7.9)
A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into the configuration tool and compromise other devices in the network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:07:23.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32747 |
vulnerable | 2026-06-08 05:44:45.736748 |
Details available
HIGH (8)
A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:07:31.318Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.