Known Vulnerabilities for Ecostruxure Process Expert by Schneider-electric
Listed below are 10 of the newest known vulnerabilities associated with "Ecostruxure Process Expert" by "Schneider-electric".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-45789 json | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus fun... | 9.8 - CRITICAL | 2023-01-31 | 2023-08-09 |
| CVE-2022-45788 json | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code executio... | 9.8 - CRITICAL | 2023-01-30 | 2023-08-09 |
| CVE-2022-37300 json | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access ... | 9.8 - CRITICAL | 2022-09-12 | 2022-09-15 |
| CVE-2022-26507 json | ** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2022-04-14 | 2023-11-07 |
| CVE-2022-24323 json | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communi... | 5.9 - MEDIUM | 2022-03-09 | 2022-03-12 |
| CVE-2021-22797 json | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause... | 7.8 - HIGH | 2022-04-13 | 2022-04-23 |
| CVE-2021-22782 json | Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, inc... | 5.5 - MEDIUM | 2021-07-14 | 2021-07-26 |
| CVE-2021-22781 json | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, inc... | 5.5 - MEDIUM | 2021-07-14 | 2021-07-26 |
| CVE-2021-22780 json | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, inc... | 7.1 - HIGH | 2021-07-14 | 2021-07-26 |
| CVE-2021-22779 json | Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, includ... | 9.1 - CRITICAL | 2021-07-14 | 2021-07-26 |