CVE:CVE-2022-32514
CNNVD:CNNVD-202301-2333
Schneider Electric C-Bus Home Automation是法国施耐德电气（Schneider Electric）公司的一系列总线家庭自动化系统。
Schneider Electric C-Bus多款产品存在授权问题漏洞，该漏洞源于其不当身份验证机制允许攻击者在登录web页面时获得设备的控制权。以下产品型号及版本受到影响：C-Bus Network Automation Controller - LSS5500NAC V1.10.0之前的版本、Wiser for C-Bus Automation Controller - LSS5500SHAC V1.10.0之前的版本、Clipsal C-Bus Network Automation Controller - 5500NAC V1.10.0之前的版本、Clipsal Wiser for C-Bus Automation Controller - 5500SHAC V1.10.0之前的版本、SpaceLogic C-Bus Network Automation Controller - 5500NAC2 V1.10.0之前的版本、SpaceLogic C-Bus Application Controller - 5500AC2 V1.10.0之前的版本。
solution:Upgrade schneider-electric 5500ac2_firmware to a higher version than 1.11.0,and avoid the version (,1.11.0); Upgrade schneider-electric 5500nac_firmware to a higher version than 1.11.0,and avoid the version (,1.11.0); Upgrade schneider-electric 5500nac2_firmware to a higher version than 1.11.0,and avoid the version (,1.11.0); Upgrade schneider-electric 5500shac_firmware to a higher version than 1.11.0,and avoid the version (,1.11.0); Upgrade schneider-electric lss5500nac_firmware to a higher version than 1.11.0,and avoid the version (,1.11.0); Upgrade schneider-electric lss5500shac_firmware to a higher version than 1.11.0,and avoid the version (,1.11.0)