Known Vulnerabilities for Ecostruxure Control Expert by Schneider-electric
Listed below are 10 of the newest known vulnerabilities associated with "Ecostruxure Control Expert" by "Schneider-electric".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-27976 json | A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid use... | 8.8 - HIGH | 2023-04-18 | 2023-05-12 |
| CVE-2023-1548 json | A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service t... | 5.5 - MEDIUM | 2023-04-18 | 2023-05-12 |
| CVE-2022-45789 json | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus fun... | 9.8 - CRITICAL | 2023-01-31 | 2023-08-09 |
| CVE-2022-45788 json | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code executio... | 9.8 - CRITICAL | 2023-01-30 | 2023-08-09 |
| CVE-2022-37302 json | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a cr... | 5.5 - MEDIUM | 2022-09-13 | 2022-09-15 |
| CVE-2022-37300 json | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access ... | 9.8 - CRITICAL | 2022-09-12 | 2022-09-15 |
| CVE-2022-26507 json | ** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2022-04-14 | 2023-11-07 |
| CVE-2022-24323 json | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communi... | 5.9 - MEDIUM | 2022-03-09 | 2022-03-12 |
| CVE-2022-24322 json | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a di... | 5.9 - MEDIUM | 2022-03-09 | 2022-03-12 |
| CVE-2021-22797 json | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause... | 7.8 - HIGH | 2022-04-13 | 2022-04-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Schneider-electric | Ecostruxure Control Expert | 14.0 |