Insufficiently Protected Credentials in Data Center Expert by Schneider Electric

CVE-2022-32518

Summary

A vulnerability exists in Data Center Expert where insufficiently protected credentials can allow unauthorized access to a DCE instance via network interactions by a malicious third-party. This security flaw highlights the importance of securing authentication processes to prevent unauthorized access to sensitive data and functionalities within the application. Users of affected versions, specifically those prior to V7.9.0, are urged to update to mitigate this security risk.

References