Known vulnerabilities in Schneider Electric EcoStruxure Process Expert

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-0327	CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and…	8.5 High	Feb 13, 2025
CVE-2023-27975	CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project…	7.1 High	Feb 14, 2024
CVE-2023-6408	CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…	8.1 High	Feb 14, 2024
CVE-2023-6409	CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file…	7.7 High	Feb 14, 2024
CVE-2022-45789	A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized…	8.1 High	Jan 31, 2023
CVE-2022-45788	A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code…	7.5 High	Jan 30, 2023
CVE-2022-37300	A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized…	9.8 Critical	Sep 12, 2022
CVE-2021-22797	A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that…	7.8 High	Mar 28, 2022
CVE-2022-24323	A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of…	5.3 Medium	Mar 9, 2022