CVE-2022-32520: Schneider Electric Data Center Expert

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Affected products

• Schneider Electric Data Center Expert: before 7.9.0 (fixed in 7.9.0)

Published 2023-01-30. Last modified 2026-06-17.