Schneider-Electric Ecostruxure Operator Terminal Expert
12 CVEs affecting Schneider-Electric Ecostruxure Operator Terminal Expert. Latest disclosed: 2023-06-14. Critical: 2, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28221 | Critical | 9.8 | 2021-01-26 | A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that… |
CVE-2020-7497 | Critical | 9.8 | 2020-06-16 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Servi… |
CVE-2023-1049 | High | 7.8 | 2023-06-14 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious use… |
CVE-2020-7494 | High | 7.8 | 2020-06-16 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Servi… |
CVE-2020-7493 | High | 7.8 | 2020-06-16 | A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1… |
CVE-2022-41671 | High | 7.0 | 2022-11-04 | A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privil… |
CVE-2022-41670 | High | 7.0 | 2022-11-04 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversari… |
CVE-2022-41669 | High | 7.0 | 2022-11-04 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges… |
CVE-2022-41668 | High | 7.0 | 2022-11-04 | A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-contro… |
CVE-2022-41667 | High | 7.0 | 2022-11-04 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privilege… |
CVE-2022-41666 | High | 7.0 | 2022-11-04 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL whi… |
CVE-2020-7495 | Medium | 5.5 | 2020-06-16 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operato… |