Schneider Electric EcoStruxure IT Gateway

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-10575Version 1.21.0.6 ; Version 1.22.0.3 ; Version 1.22.1.5 ; …CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impactiCRITICAL 10.00.6 %
CVE-2024-08651.20.x and priorCWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administratiHIGH 7.80.2 %