CVE-2022-32518

published 2023-01-30

CVE-2022-32518: A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32520. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	data_center_expert	< 7.9.0	7.9.0
schneider_electric	data_center_expert	>= All < V7.9.0	V7.9.0

CWE-522