Schneider-electric

Ecostruxure Energy Expert

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2020-7545

  • EPSS 0.46%
  • Published 01.12.2020 15:15:12
  • Last modified 21.11.2024 05:37:21

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for arbitrary code execution on the server when an auth...

5.4

CVE-2020-7546

  • EPSS 0.3%
  • Published 01.12.2020 15:15:12
  • Last modified 21.11.2024 05:37:21

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow an attacker to perf...

8.8

CVE-2020-7547

  • EPSS 0.35%
  • Published 01.12.2020 15:15:12
  • Last modified 21.11.2024 05:37:21

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web inte...

6.1

CVE-2018-7797

  • EPSS 0.17%
  • Published 17.12.2018 22:29:00
  • Last modified 21.11.2024 04:12:45

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA...