Schneider Electric Se Iiot Monitor 3.1.38
4 CVEs affecting Schneider Electric Se Iiot Monitor 3.1.38. Latest disclosed: 2019-02-06. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7836 | Critical | 9.8 | 2018-12-24 | An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and exe… |
CVE-2018-7837 | High | 7.5 | 2018-12-24 | An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow… |
CVE-2018-7835 | High | 7.5 | 2018-12-24 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files… |
CVE-2018-7839 | Medium | 5.5 | 2019-02-06 | A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure. |