CVE-2022-32520
Assigner: schneider
Published: 2023-01-30T00:00:00
State: PUBLISHED
datePublic: 2022-06-14T00:00:00
descriptions: value: A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert (Versions prior to V7.9.0)
affected: vendor: Schneider Electric
product: Data Center Expert
versions: version: All
status: affected
lessThan: V7.9.0
versionType: custom
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-522 Insufficiently Protected Credentials
cweId: CWE-522
x_generator: engine: Vulnogram 0.0.9
source: discovery: UNKNOWN