Schneider Electric Schneider Electric

Do you want an email whenever new security vulnerabilities are reported in any Schneider Electric product?

Products by Schneider Electric Sorted by Most Security Vulnerabilities since 2018

Schneider Electric Guicon6 vulnerabilities

Schneider Electric Somachine5 vulnerabilities

Schneider Electric Unity Pro4 vulnerabilities

Schneider Electric Somove3 vulnerabilities

Schneider Electric Proclima3 vulnerabilities

Schneider Electric U Motion2 vulnerabilities

By the Year

In 2024 there have been 1 vulnerability in Schneider Electric with an average score of 7.8 out of ten. Last year Schneider Electric had 65 security vulnerabilities published. Right now, Schneider Electric is on track to have less security vulnerabilities in 2024 than it did last year. Last year, the average CVE base score was greater by 0.42

Year Vulnerabilities Average Score
2024 1 7.80
2023 65 8.22
2022 49 7.88
2021 38 7.43
2020 48 7.80
2019 18 7.46
2018 61 6.75

It may take a day or so for new Schneider Electric vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Schneider Electric Security Vulnerabilities

A CWE-502: Deserialization of untrusted data vulnerability exists

CVE-2023-7032 7.8 - High - January 09, 2024

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object.

Marshaling, Unmarshaling

A CWE-601 URL Redirection to Untrusted Site vulnerability exists

CVE-2023-5986 6.1 - Medium - November 15, 2023

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the softwares web application to redirect to the chosen domain after a successful login is performed.

Open Redirect

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability

CVE-2023-5987 6.1 - Medium - November 15, 2023

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victims browser run arbitrary JavaScript when they visit a page containing the injected payload.

A CWE-502: Deserialization of untrusted data vulnerability exists

CVE-2023-5391 9.8 - Critical - October 04, 2023

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application.

Marshaling, Unmarshaling

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists

CVE-2023-5399 9.8 - Critical - October 04, 2023

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command.

Directory traversal

A CWE-269: Improper Privilege Management vulnerability exists

CVE-2023-5402 9.8 - Critical - October 04, 2023

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.

Improper Privilege Management

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service

CVE-2023-4516 7.8 - High - September 14, 2023

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content.

Missing Authentication for Critical Function

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists

CVE-2023-3953 5.3 - Medium - August 09, 2023

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.

Buffer Overflow

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists

CVE-2023-29414 7.8 - High - July 12, 2023

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local function call.

Classic Buffer Overflow

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists

CVE-2023-37199 7.2 - High - July 12, 2023

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

Code Injection

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists

CVE-2023-37196 8.8 - High - July 12, 2023

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the alert settings of endpoints on DCE.

SQL Injection

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists

CVE-2023-37197 8.8 - High - July 12, 2023

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE.

SQL Injection

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists

CVE-2023-37198 7.2 - High - July 12, 2023

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.

Code Injection

A CWE-787: Out-of-Bounds Write vulnerability exists

CVE-2023-2569 7.8 - High - June 14, 2023

A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Memory Corruption

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists

CVE-2023-1049 7.8 - High - June 14, 2023

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

Code Injection

A CWE-129: Improper Validation of Array Index vulnerability exists

CVE-2023-2570 7.8 - High - June 14, 2023

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver.

out-of-bounds array index

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module

CVE-2023-3001 7.8 - High - June 14, 2023

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file.

Marshaling, Unmarshaling

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists

CVE-2023-2161 5.5 - Medium - May 16, 2023

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user. 

XXE

A CWE-613: Insufficient Session Expiration vulnerability exists

CVE-2023-28003 8.8 - High - April 18, 2023

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account.

Insufficient Session Expiration

A CWE-863: Incorrect Authorization vulnerability exists

CVE-2023-25547 8.8 - High - April 18, 2023

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

AuthZ

A CWE-863: Incorrect Authorization vulnerability exists

CVE-2023-25548 6.5 - Medium - April 18, 2023

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a low privileged user. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

AuthZ

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists

CVE-2023-25549 9.8 - Critical - April 18, 2023

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings endpoint. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Code Injection

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists

CVE-2023-25550 9.8 - Critical - April 18, 2023

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the hostname parameter when maliciously crafted hostname syntax is entered. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Code Injection

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters over HTTP

CVE-2023-25551 6.1 - Medium - April 18, 2023

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters over HTTP. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

XSS

A CWE-862: Missing Authorization vulnerability exists

CVE-2023-25552 8.1 - High - April 18, 2023

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

AuthZ

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the webserver

CVE-2023-25553 6.1 - Medium - April 18, 2023

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the webserver. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

XSS

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

CVE-2023-25554 7.8 - High - April 18, 2023

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance when a maliciously crafted Operating System command is entered on the device. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Shell injection

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

CVE-2023-25555 8.1 - High - April 18, 2023

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to execute unprivileged shell commands on the appliance over SSH. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Shell injection

A CWE-427 - Uncontrolled Search Path Element vulnerability exists

CVE-2022-34755 6.7 - Medium - April 18, 2023

A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged account to place a specially crafted file on the target machine, which may give the attacker the ability to execute arbitrary code during the installation process initiated by a valid user. Affected Products: Easergy Builder Installer (1.7.23 and prior)

DLL preloading

A CWE-269: Improper Privilege Management vulnerability exists

CVE-2023-1548 5.5 - Medium - April 18, 2023

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Improper Privilege Management

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists

CVE-2023-27976 8.8 - High - April 18, 2023

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Exposure of Resource to Wrong Sphere

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface

CVE-2023-27983 5.3 - Medium - March 21, 2023

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report directory, this would lead to loss of data when an attacker abuses this functionality. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Missing Authentication for Critical Function

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server

CVE-2023-27979 6.5 - Medium - March 21, 2023

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this could lead to denial of service when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Insufficient Verification of Data Authenticity

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server

CVE-2023-27977 5.3 - Medium - March 21, 2023

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Insufficient Verification of Data Authenticity

A CWE-20: Improper Input Validation vulnerability exists in Custom Reports

CVE-2023-27984 8.8 - High - March 21, 2023

A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens a malicious report file planted by an attacker. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Improper Input Validation

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports

CVE-2023-27981 8.8 - High - March 21, 2023

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Directory traversal

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module

CVE-2023-27978 7.8 - High - March 21, 2023

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Marshaling, Unmarshaling

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server

CVE-2023-27982 8.8 - High - March 21, 2023

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code execution when a victim eventually opens a malicious dashboard file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).

Insufficient Verification of Data Authenticity

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface

CVE-2023-27980 8.8 - High - March 21, 2023

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS project report directory, this could lead to remote code execution when a victim eventually opens the report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)

Missing Authentication for Critical Function

A CWE-117: Improper Output Neutralization for Logs vulnerability exists

CVE-2023-0595 5.3 - Medium - February 24, 2023

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)

Improper Output Neutralization for Logs

A CWE-190: Integer Overflow or Wraparound vulnerability exists

CVE-2022-2329 9.8 - Critical - February 01, 2023

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)

Integer Overflow or Wraparound

A CWE-285: Improper Authorization vulnerability exists

CVE-2022-4062 7.8 - High - February 01, 2023

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)

AuthZ

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-24324 9.8 - Critical - February 01, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)

Classic Buffer Overflow

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists

CVE-2023-22611 7.5 - High - January 31, 2023

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)

A CWE-863: Incorrect Authorization vulnerability exists

CVE-2023-22610 7.5 - High - January 31, 2023

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.

AuthZ

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists

CVE-2022-45789 9.8 - Critical - January 31, 2023

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)

Authentication Bypass by Capture-replay

A CWE-290: Authentication Bypass by Spoofing vulnerability exists

CVE-2022-32747 8.1 - High - January 30, 2023

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Authentication Bypass by Spoofing

A CWE-295: Improper Certificate Validation vulnerability exists

CVE-2022-32748 8.3 - High - January 30, 2023

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into the configuration tool and compromise other devices in the network. Affected Products: EcoStruxure Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Improper Certificate Validation

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32525 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32522 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted mathematically reduced data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-522: Insufficiently Protected Credentials vulnerability exists

CVE-2022-32518 9.8 - Critical - January 30, 2023

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32520. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Insufficiently Protected Credentials

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists

CVE-2022-32519 9.8 - Critical - January 30, 2023

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Insufficiently Protected Credentials

A CWE-522: Insufficiently Protected Credentials vulnerability exists

CVE-2022-32520 9.8 - Critical - January 30, 2023

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Insufficiently Protected Credentials

A CWE 502: Deserialization of Untrusted Data vulnerability exists

CVE-2022-32521 8.8 - High - January 30, 2023

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Marshaling, Unmarshaling

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32523 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted online data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32524 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted time reduced data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32527 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm cache data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-306: Missing Authentication for Critical Function vulnerability exists

CVE-2022-32528 9.1 - Critical - January 30, 2023

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory, potentially leading to a denial-of-service condition when an attacker sends specific messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Missing Authentication for Critical Function

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32529 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries

CVE-2022-0223 9.8 - Critical - January 30, 2023

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause unauthenticated code execution. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Directory traversal

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries

CVE-2022-22731 9.8 - Critical - January 30, 2023

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause path traversal attacks. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Directory traversal

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists

CVE-2022-22732 7.5 - High - January 30, 2023

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Exposure of Resource to Wrong Sphere

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists

CVE-2022-32512 7.8 - High - January 30, 2023

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause remote code execution when a command which exploits this vulnerability is utilized. Affected Products: CanBRASS (Versions prior to V7.5.1)

Buffer Overflow

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2022-32526 9.8 - Critical - January 30, 2023

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted setting value messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Classic Buffer Overflow

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists

CVE-2022-45788 9.8 - Critical - January 30, 2023

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)

Improper Check for Unusual or Exceptional Conditions

A CWE-787: Out-of-bounds Write vulnerability exists

CVE-2022-2988 7.5 - High - January 30, 2023

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert HVAC (Versions prior to V1.4.0)

Memory Corruption

A CWE-89: Improper Neutralization of Special Elements used in SQL Command (SQL Injection) vulnerability exists

CVE-2022-41671 7.8 - High - November 04, 2022

A CWE-89: Improper Neutralization of Special Elements used in SQL Command (SQL Injection) vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

SQL Injection

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component

CVE-2022-41670 7.8 - High - November 04, 2022

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

Directory traversal

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component

CVE-2022-41669 7.8 - High - November 04, 2022

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

Improper Verification of Cryptographic Signature

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists

CVE-2022-41667 7.8 - High - November 04, 2022

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

Directory traversal

A CWE-704: Incorrect Project Conversion vulnerability exists

CVE-2022-41668 7.8 - High - November 04, 2022

A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

Incorrect Type Conversion or Cast

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists

CVE-2022-41666 7.8 - High - November 04, 2022

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

Improper Verification of Cryptographic Signature

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists

CVE-2022-37302 5.5 - Medium - September 13, 2022

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Control Expert software when an incorrect project file is opened. Affected Products: EcoStruxure Control Expert(V15.1 HF001 and prior).

Buffer Overflow

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists

CVE-2022-37300 9.8 - Critical - September 12, 2022

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).

Weak Password Recovery Mechanism for Forgotten Password

A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists

CVE-2022-32530 7.8 - High - June 24, 2022

A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious application. Affected Product: Geo SCADA Mobile (Build 222 and prior)

Exposure of Resource to Wrong Sphere

** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7

CVE-2022-26507 9.8 - Critical - April 14, 2022

** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, or CVE-2021-21830. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Memory Corruption

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists

CVE-2021-22797 7.8 - High - April 13, 2022

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x70 (All versions)

Directory traversal

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists

CVE-2022-0221 5.5 - Medium - April 13, 2022

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker. Affected Product: SCADAPack Workbench (6.6.8a and prior)

XXE

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could

CVE-2019-6834 7.8 - High - April 13, 2022

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneider Electric Software Update (SESU) SUT Service component (V2.1.1 to V2.3.0)

Marshaling, Unmarshaling

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists

CVE-2021-22794 9.8 - Critical - April 13, 2022

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

Directory traversal

A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

CVE-2021-22795 9.8 - Critical - April 13, 2022

A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

Shell injection

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door

CVE-2021-22783 7.6 - High - March 09, 2022

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists

CVE-2022-24323 5.9 - Medium - March 09, 2022

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Process Expert (V2021 and prior), EcoStruxure Control Expert (V15.0 SP1 and prior)

Improper Check for Unusual or Exceptional Conditions

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists

CVE-2022-24322 5.9 - Medium - March 09, 2022

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior)

Buffer Overflow

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists

CVE-2021-22803 9.8 - Critical - February 11, 2022

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Unrestricted File Upload

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2021-22802 9.8 - Critical - February 11, 2022

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Classic Buffer Overflow

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists

CVE-2021-22804 7.5 - High - February 11, 2022

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Directory traversal

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists

CVE-2021-22824 7.5 - High - February 11, 2022

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)

Classic Buffer Overflow

A CWE-306: Missing Authentication for Critical Function vulnerability exists

CVE-2021-22823 9.1 - Critical - February 11, 2022

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)

Missing Authentication for Critical Function

A CWE-269: Improper Privilege Management vulnerability exists

CVE-2021-22801 9.8 - Critical - February 11, 2022

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software (All Versions)

Improper Privilege Management

A CWE-306: Missing Authentication for Critical Function vulnerability exists

CVE-2021-22805 9.1 - Critical - February 11, 2022

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Missing Authentication for Critical Function

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists

CVE-2021-22748 8.8 - High - February 11, 2022

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote code execution when a file is saved. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)

Directory traversal

A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is uploaded

CVE-2021-22796 7.8 - High - February 11, 2022

A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is uploaded. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)

authentification

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists

CVE-2022-24321 7.5 - High - February 09, 2022

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

Improper Check for Unusual or Exceptional Conditions

A CWE-295: Improper Certificate Validation vulnerability exists

CVE-2022-24319 5.9 - Medium - February 09, 2022

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

Improper Certificate Validation

A CWE-276: Incorrect Default Permissions vulnerability exists

CVE-2021-22817 7.8 - High - February 09, 2022

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)

Incorrect Default Permissions

A CWE-665: Improper Initialization vulnerability exists

CVE-2022-24316 7.5 - High - February 09, 2022

A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

Improper Initialization

A CWE-295: Improper Certificate Validation vulnerability exists

CVE-2022-24320 5.9 - Medium - February 09, 2022

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA database server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

Improper Certificate Validation

A CWE-125: Out-of-bounds Read vulnerability exists

CVE-2022-24314 7.5 - High - February 09, 2022

A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

Out-of-bounds Read

A CWE-125: Out-of-bounds Read vulnerability exists

CVE-2022-24315 7.5 - High - February 09, 2022

A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

Out-of-bounds Read

Built by Foundeo Inc., with data from the National Vulnerability Database (NVD), Icons by Icons8. Privacy Policy. Use of this site is governed by the Legal Terms
Disclaimer
CONTENT ON THIS WEBSITE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. Always check with your vendor for the most up to date, and accurate information.