Schneider Electric Easergy Studio

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-9002Versions 9.3.1 and priorCWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and avHIGH 7.80.2 %
CVE-2024-2747v9.3.3 and priorCWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user reHIGH 7.80.2 %
CVE-2023-7032All – <=9.3.5A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain hHIGH 7.80.5 %