Improper Verification of Cryptographic Signature in EcoStruxure Operator Terminal Expert and Pro-face BLUE

CVE-2022-41666

What is CVE-2022-41666?

A vulnerability exists in Schneider Electric's EcoStruxure Operator Terminal Expert and Pro-face BLUE products due to improper verification of cryptographic signatures. This flaw permits attackers with local user privileges to load a malicious dynamic-link library (DLL), which can lead to unauthorized execution of malicious code. This poses a significant security risk, making it crucial for users to apply the relevant patches and updates to secure their systems.

References