Schneider Electric EcoStruxure Control Expert
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-27975 | Versions prior to v16.0 | CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure C | HIGH 7.1 | 0.1 % | ||
| CVE-2023-6408 | Versions prior to v16.0 | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a de | HIGH 8.1 | 0.3 % | ||
| CVE-2023-6409 | Versions prior to v16.0 | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with applicatio | HIGH 7.7 | 0.2 % | ||
| CVE-2023-1548 | V15.1 and above | A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the conso | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-27976 | V15.1 and above | A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malic | HIGH 8.8 | 0.8 % | ||
| CVE-2022-45789 | All Versions | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the c | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-45788 | All Versions | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of se | CRITICAL 9.8 | 1.2 % | ||
| CVE-2022-37302 | HF001 – 15.1 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Cont | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-37300 | SP1 – 15.0 | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and wri | CRITICAL 9.8 | 0.8 % | ||
| CVE-2021-22797 | unspecified – < V15.0 SP1 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious scri | HIGH 7.8 | 26 % | ||
| CVE-2022-24323 | V15.0 SP1 and prior | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between | MEDIUM 5.9 | 0.9 % | ||
| CVE-2022-24322 | V15.0 SP1 and prior | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of com | MEDIUM 5.9 | 0.6 % |