Schneider-electric

Iiot Monior

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2018-7835

  • EPSS 0.41%
  • Published 24.12.2018 16:29:00
  • Last modified 21.11.2024 04:12:50

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user.

7.5

CVE-2018-7837

  • EPSS 0.42%
  • Published 24.12.2018 16:29:00
  • Last modified 21.11.2024 04:12:51

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the so...