Password Storage Vulnerability in Data Center Expert by Schneider Electric
CVE-2022-32519

8HIGH

Key Information:

Vendor

Schneider Electric
Status
Data Center Expert
Vendor
CVE Published:
30 January 2023

What is CVE-2022-32519?

A vulnerability exists in Schneider Electric’s Data Center Expert, where passwords are stored in a recoverable format. This can lead to unauthorized access to a DCE instance if exploited by a malicious third-party over a network connection. It is crucial for users of affected versions to update to version V7.9.0 or later to mitigate this risk and enhance the security posture of their data center management.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Data Center Expert All

References

https://download.schneider-electric.com/files?p_enDocType...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.