CVE-2022-32747: Schneider Electric Ecostruxure Cybersecurity Admin Expert

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Affected products

• Schneider Electric Ecostruxure Cybersecurity Admin Expert: before 2.4 (fixed in 2.4)

Published 2023-01-30. Last modified 2026-06-17.