Schneider Electric EcoStruxure Machine Expert 2.0

CPE Details

Schneider Electric EcoStruxure Machine Expert 2.0
schneider-electric
ecostruxure_machine_expert
2.0
2021-09-20
09h52 +00:00
2022-01-31
18h32 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:schneider-electric:ecostruxure_machine_expert:2.0:*:*:*:*:*:*:*

Informations

Vendor

schneider-electric

Product

ecostruxure_machine_expert

Version

2.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-22704 2021-09-02 14h53 +00:00 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP.
9.1
Critique
CVE-2020-7488 2020-04-22 16h51 +00:00 A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
7.5
Haute
CVE-2020-7487 2020-04-22 16h50 +00:00 A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
9.8
Critique
CVE-2020-7489 2020-04-22 16h15 +00:00 A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.
9.8
Critique