Schneider-electric

Software Update

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2019-6834

  • EPSS 0.28%
  • Published 13.04.2022 16:15:09
  • Last modified 21.11.2024 04:47:14

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be suc...

3.8

CVE-2021-22799

  • EPSS 0.05%
  • Published 28.01.2022 20:15:09
  • Last modified 21.11.2024 05:50:41

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Ele...