CVE-2023-6409
Published Feb 14, 2024CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with E…
Vendor/product archive
schneider-electric / ecostruxure_process_expert CVEs
Beta · best-effort13 CVEs tagged to schneider-electric / ecostruxure_process_expert — 3 Critical, 7 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2023-27975
Published Feb 14, 2024CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers…
CVE-2022-45789
Published Jan 31, 2023A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticat…
- evidence mentions
- 3
- Buzz score
- 21.9
CVE-2022-45788
Published Jan 30, 2023A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & int…
- evidence mentions
- 3
- Buzz score
- 21.9
CVE-2022-37300
Published Sep 12, 2022A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communic…
CVE-2022-26507
Published Apr 14, 2022A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as an…
CVE-2021-22797
Published Apr 13, 2022A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized lo…
CVE-2022-24323
Published Mar 9, 2022A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineer…
CVE-2021-22782
Published Jul 14, 2021Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process…
CVE-2021-22781
Published Jul 14, 2021Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process…
CVE-2021-22780
Published Jul 14, 2021Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process…
CVE-2021-22779
Published Jul 14, 2021Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Ex…
- evidence mentions
- 6
- Buzz score
- 29.0
CVE-2021-22778
Published Jul 14, 2021Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process…
Showing 1-13 of 13 CVEsPage 1 of 1