Known vulnerabilities in Schneider Electric EcoStruxure Operator Terminal Expert
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-41667 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that… | 7.0 High | Nov 4, 2022 |
| CVE-2022-41666 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user… | 7.0 High | Nov 4, 2022 |
| CVE-2022-41671 | A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that… | 7.0 High | Nov 4, 2022 |
| CVE-2022-41670 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the… | 7.0 High | Nov 4, 2022 |
| CVE-2022-41669 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows… | 7.0 High | Nov 4, 2022 |
| CVE-2022-41668 | A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to… | 7.0 High | Nov 4, 2022 |
Other Schneider Electric products
StruxureWare Data Center Expert 15
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
PowerChute™ Serial Shutdown 11
IGSS Data Server (IGSSdataServer.exe) 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure Process Expert 9
Custom Reports (RMS16.dll) 8
IGSS Data Server(IGSSdataServer.exe) 8
Modicon Momentum Unity M1E Processor (171CBU*) 7
EcoStruxure™ IT Data Center Expert 7
Modicon Controllers M241/M251 7