Schneider Electric EcoStruxure Operator Terminal Expert
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-41671 | V3.3 – Hotfix 1 | A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries wit | HIGH 7.8 | 0.3 % | ||
| CVE-2022-41670 | V3.3 – Hotfix 1 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component th | HIGH 7.8 | 0.2 % | ||
| CVE-2022-41669 | V3.3 – Hotfix 1 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with lo | HIGH 7.8 | 0.1 % | ||
| CVE-2022-41668 | V3.3 – Hotfix 1 | A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from | HIGH 7.8 | 0.2 % | ||
| CVE-2022-41667 | V3.3 – Hotfix 1 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with l | HIGH 7.8 | 0.2 % | ||
| CVE-2022-41666 | V3.3 – Hotfix 1 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load | HIGH 7.8 | 0.1 % |