Critical severity9.8NVD Advisory· Published Jan 30, 2023· Updated Jun 17, 2026
CVE-2022-32514
CVE-2022-32514
Description
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page. Affected Products: C-Bus Network Automation Controller - LSS5500NAC (Versions prior to V1.10.0), Wiser for C-Bus Automation Controller - LSS5500SHAC (Versions prior to V1.10.0), Clipsal C-Bus Network Automation Controller - 5500NAC (Versions prior to V1.10.0), Clipsal Wiser for C-Bus Automation Controller - 5500SHAC (Versions prior to V1.10.0), SpaceLogic C-Bus Network Automation Controller - 5500NAC2 (Versions prior to V1.10.0), SpaceLogic C-Bus Application Controller - 5500AC2 (Versions prior to V1.10.0)
Affected products
10- cpe:2.3:o:schneider-electric:5500ac2_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:5500nac2_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:5500nac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:5500shac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:lss5500nac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- cpe:2.3:o:schneider-electric:lss5500shac_firmware:*:*:*:*:*:*:*:*Range: <1.11.0
- Range: <V1.10.0
- Range: <V1.10.0
- Range: <V1.10.0
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.