Known vulnerabilities in Schneider Electric Custom Reports (RMS16.dll)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-27984 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed,… | 7.8 High | Mar 21, 2023 |
| CVE-2023-27983 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could… | 6.5 Medium | Mar 21, 2023 |
| CVE-2023-27982 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause… | 8.8 High | Mar 21, 2023 |
| CVE-2023-27981 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that… | 7.8 High | Mar 21, 2023 |
| CVE-2023-27980 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could… | 8.8 High | Mar 21, 2023 |
| CVE-2023-27979 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the… | 6.5 Medium | Mar 21, 2023 |
| CVE-2023-27978 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an… | 7.8 High | Mar 21, 2023 |
| CVE-2023-27977 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause… | 6.5 Medium | Mar 21, 2023 |
Other Schneider Electric products
StruxureWare Data Center Expert 15
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
PowerChute™ Serial Shutdown 11
IGSS Data Server (IGSSdataServer.exe) 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure Process Expert 9
IGSS Data Server(IGSSdataServer.exe) 8
Modicon Momentum Unity M1E Processor (171CBU*) 7
Modicon Controllers M241/M251 7
EcoStruxure™ IT Data Center Expert 7
OPC UA Modicon Communication Module 7