VULNERABILITY INTELLIGENCE

CVE-2022-32747

CVSS score8 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2023-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Weakness classification

  • cybersecurity@se.com: CWE-290

Primary references