Skip to contentSchneider-electric Ecostruxure Control Expert vulnerabilities
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized...CVE-2023-279757.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +46 more +48 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication...CVE-2023-64088.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access...CVE-2023-64097.7 High
- schneider electric ecostruxure control expertA CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to...CVE-2023-15485.5 Medium
- schneider electric ecostruxure control expertA CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause
remote...CVE-2023-279768.8 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +37 more +39 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause...CVE-2022-457898.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, legacy modicon quantum (140cpu65*) and premium cpus (tsxp57*) +58 more +60 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-457887.5 High
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-373025.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu +35 more +37 moreA CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that...CVE-2022-373009.8 Critical
- att xmill, schneider-electric ecostruxure control expert, ecostruxure process expert +1 more +3 more** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression...CVE-2022-265079.8 Critical
- schneider electric ecostruxure control expert, ecostruxure process expert, scadapack remoteconnect for x70 +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal)...CVE-2021-22797EPSS 26.1%7.8 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-243235.3 Medium
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-243225.3 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the...CVE-2021-227927.5 High
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon...CVE-2021-227916.5 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon...CVE-2021-227906.5 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2021-227896.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreMissing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227825.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227815.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227807.1 High
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +29 more +31 moreAuthentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227799.1 Critical
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227787.1 High
- schneider-electric unity pro, ecostruxure control expert +1 moreA CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all...CVE-2020-75608.6 High
- schneider-electric ecostruxure control expertA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...CVE-2020-75597.5 High
- schneider-electric ecostruxure control expertA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC...CVE-2020-75387.5 High
- schneider-electric ecostruxure control expertA CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on...CVE-2020-282138.8 High
- schneider-electric ecostruxure control expertA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC...CVE-2020-282129.8 Critical
- schneider-electric ecostruxure control expertA CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control...CVE-2020-282117.8 High
- schneider-electric ecostruxure control expert, unity pro, modicon m340 firmware +1 more +3 moreA CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (...CVE-2020-74759.8 Critical
- schneider-electric ecostruxure control expert, unity pro, modicon m340 bmxp341000 firmware +20 more +22 moreAn Improper Authorization - CWE-285 vulnerability exists in EcoStruxure? Control Expert V14.0 and...CVE-2019-68557.3 High