Critical severity9.8NVD Advisory· Published Jan 30, 2023· Updated Jun 17, 2026
CVE-2022-32513
CVE-2022-32513
Description
A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker brute forces the password. Affected Products: C-Bus Network Automation Controller - LSS5500NAC (Versions prior to V1.10.0), Wiser for C-Bus Automation Controller - LSS5500SHAC (Versions prior to V1.10.0), Clipsal C-Bus Network Automation Controller - 5500NAC (Versions prior to V1.10.0), Clipsal Wiser for C-Bus Automation Controller - 5500SHAC (Versions prior to V1.10.0), SpaceLogic C-Bus Network Automation Controller - 5500NAC2 (Versions prior to V1.10.0), SpaceLogic C-Bus Application Controller - 5500AC2 (Versions prior to V1.10.0)
Affected products
12- cpe:2.3:o:schneider-electric:5500ac2_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:5500nac2_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:5500nac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:5500shac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:lss5500nac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:lss5500shac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- Range: <V1.10.0
- Range: <V1.10.0
- Range: <V1.10.0
- Range: <V1.10.0
<V1.10.0+ 1 more
- (no CPE)range: <V1.10.0
- (no CPE)range: All
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.