CVE-2022-32513: Critical severity schneider electric 5500ac2 vulnerability
A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker brute forces the password. Affected Products: C-Bus Network Automation Controller - LSS5500NAC (Versions prior to V1.10.0), Wiser for C-Bus Automation Controller - LSS5500SHAC (Versions prior to V1.10.0), Clipsal C-Bus Network Automation Controller - 5500NAC (Versions prior to V1.10.0), Clipsal Wiser for C-Bus Automation Controller - 5500SHAC (Versions prior to V1.10.0), SpaceLogic C-Bus Network Automation Controller - 5500NAC2 (Versions prior to V1.10.0), SpaceLogic C-Bus Application Controller - 5500AC2 (Versions prior to V1.10.0)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32513?
CVE-2022-32513 is classified with a CWE-521 severity due to weak password requirements.
How do I fix CVE-2022-32513?
To fix CVE-2022-32513, upgrade the firmware of affected C-Bus Network Automation Controllers to version 1.10.0 or newer.
What products are affected by CVE-2022-32513?
CVE-2022-32513 affects the C-Bus Network Automation Controller and Wiser for C-Bus Automation Controller prior to firmware version 1.10.0.
What can an attacker do with CVE-2022-32513?
An attacker can potentially gain control of the device by brute forcing weak passwords due to CVE-2022-32513.
Is there a patch available for CVE-2022-32513?
Yes, a patch is available by updating the firmware for the impacted products to version 1.10.0 or above.