Known vulnerabilities in Schneider Electric Wiser Smart
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-30238 | A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when… | 8.3 High | Jun 2, 2022 |
| CVE-2022-30237 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be… | 8.2 High | Jun 2, 2022 |
| CVE-2022-30236 | A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an… | 8.2 High | Jun 2, 2022 |
| CVE-2022-30235 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow… | 8.6 High | Jun 2, 2022 |
| CVE-2022-30234 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root… | 9.4 Critical | Jun 2, 2022 |
| CVE-2022-30233 | A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when… | 6.5 Medium | Jun 2, 2022 |
Other Schneider Electric products
StruxureWare Data Center Expert 15
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
PowerChute™ Serial Shutdown 11
IGSS Data Server (IGSSdataServer.exe) 10
EcoStruxure Process Expert 9
IGSS Dashboard (DashBoard.exe) 9
Custom Reports (RMS16.dll) 8
IGSS Data Server(IGSSdataServer.exe) 8
Modicon Momentum Unity M1E Processor (171CBU*) 7
OPC UA Modicon Communication Module 7
EcoStruxure™ IT Data Center Expert 7