EcoStruxure Cybersecurity Admin Expert Security Notification

This document is a security notification from Schneider Electric detailing multiple high-severity vulnerabilities (CVE-2022-32747 and CVE-2022-32748) in the EcoStruxure™ Cybersecurity Admin Expert (CAE) product, versions 2.2 and prior. It outlines risks of authentication bypass via spoofing and improper certificate validation that could lead to device compromise, and provides remediation steps including upgrading to version 2.4, along with recommended mitigations and general cybersecurity best practices.