Schneider Electric Data Center Expert vulnerabilities

4 vulnerabilities

Known vulnerabilities in Schneider Electric Data Center Expert, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-32520schneider electricdata center expert+1
EPSS score
0.54%
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert (Versions prior to V7.9.0)9.8CVE-2022-32518schneider electricdata center expert+1
EPSS score
0.54%
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32520. Affected Products: Data Center Expert (Versions prior to V7.9.0)8.8CVE-2022-32521schneider electricdata center expert+1
EPSS score
0.54%
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert (Versions prior to V7.9.0)9.8CVE-2022-32519schneider electricdata center expert+1
EPSS score
0.48%
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)