PT-2022-3530 · Schneider Electric · Ecostruxure Cybersecurity Admin Expert

Published 2022-06-14 · Updated 2023-04-03 · CVE-2022-32747

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EcoStruxure Cybersecurity Admin Expert (CAE) versions prior to 2.2

Description A vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. This issue is related to authentication bypass by spoofing, which could be exploited by an attacker to conduct spoofing attacks.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the local network to minimize the risk of exploitation. Additionally, monitor user activity and account creation to detect potential backdoor accounts.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

BDU:2022-04313

CVE-2022-32747

Affected Products

Ecostruxure Cybersecurity Admin Expert

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-32747 · Security Note
• https://bdu.fstec.ru/vul/2022-04313 · Security Note
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cybersecurity_Admin_Expert_Security_Notification.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32747 · Vendor Advisory
• https://t.me/cvenotify/43158 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cybersecurity_Admin_Expert_Security_Notification.pdf · Note
• https://t.me/cibsecurity/57196 · Telegram Post