CVE-2022-32748CWE-295

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure…

High · published January 30, 2023

CVSS v3.1
7.9
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into the configuration tool and compromise other devices in the network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2023-01-30T00:00Z
EPSS history
Timeline
  • 30 JAN 00:00Z
    A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure…
    cvelistv5