Skip to contentSchneider Electric Pro-face Blue vulnerabilities
- schneider electric harmony (formerly magelis) hmist6, hmistm6, hmig3u, hmig3x, hmisto7 series with ecostruxure operator terminal expert runtime, pfxst6000, pfxstm6000, pfxsp5000, pfxgp4100 series with pro-face blue runtime +1 moreCWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause...CVE-2024-119998.7 High
- schneider electric ecostruxure™ operator terminal expert, pro-face blue, schneider-electric ecostruxure operator terminal expert +2 moreA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-10497.8 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’)...CVE-2022-416717.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-416707.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the...CVE-2022-416697.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local...CVE-2022-416687.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-416677.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows...CVE-2022-416667.0 High