Known vulnerabilities in EcoStruxure Control Expert

Vendor: Schneider Electric
Software: EcoStruxure Control Expert
Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoStruxure Control Expert EcoStruxure Control Expert is affected by 23 known vulnerabilities: 13 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101041 - Insufficiently Protected Credentials
CVE-2023-27975		 CWE-522 Low
No
No
 16.0 29.11.2024 SB2024112909
#VU101040 - Use of Hard-coded Credentials
CVE-2023-6409		 CWE-798 High
No
No
 16.0 29.11.2024 SB2024112909
#VU78552 - Improper Check for Unusual or Exceptional Conditions
CVE-2022-45788		 CWE-754 Medium
No
No
 15.3 24.07.2023 SB2023072411
#VU58500 - Insufficient Entropy
CVE-2021-22799		 CWE-331 Low
No
No
 - 03.12.2021 SB2021120302
#VU56670 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22796		 CWE-22 High
No
No
 - 17.09.2021 SB2021091701
#VU55803 - Memory corruption
CVE-2021-21828		 CWE-119 High
No
No
 - 12.08.2021 SB2021081203
#VU55802 - Memory corruption
CVE-2021-21827		 CWE-119 High
No
No
 - 12.08.2021 SB2021081203
#VU55801 - Memory corruption
CVE-2021-21826		 CWE-119 High
No
No
 - 12.08.2021 SB2021081203
#VU55800 - Heap-based Buffer Overflow
CVE-2021-21830		 CWE-122 High
No
No
 - 12.08.2021 SB2021081203
#VU55799 - Heap-based Buffer Overflow
CVE-2021-21825		 CWE-122 High
No
No
 - 12.08.2021 SB2021081203
#VU55798 - Heap-based Buffer Overflow
CVE-2021-21829		 CWE-122 High
No
No
 - 12.08.2021 SB2021081203
#VU54866 - Missing Encryption of Sensitive Data
CVE-2021-22782		 CWE-311 Medium
No
No
 15.0 SP1 14.07.2021 SB2021071414
#VU54865 - Insufficiently Protected Credentials
CVE-2021-22781		 CWE-522 Medium
No
No
 15.0 SP1 14.07.2021 SB2021071414
#VU54864 - Insufficiently Protected Credentials
CVE-2021-22780		 CWE-522 Medium
No
No
 15.0 SP1 14.07.2021 SB2021071414
#VU54863 - Authentication Bypass by Spoofing
CVE-2021-22779		 CWE-290 High
No
No
 15.1 14.07.2021 SB2021071415
#VU54862 - Insufficiently Protected Credentials
CVE-2021-22778		 CWE-522 High
No
No
 15.0 SP1 14.07.2021 SB2021071414
#VU49956 - Deserialization of Untrusted Data
CVE-2020-12525		 CWE-502 Medium
No
No
 - 22.01.2021 SB2021012509
SB2021071415
#VU48962 - Write-what-where Condition
CVE-2020-7560		 CWE-123 High
No
No
 - 11.12.2020 SB2020121412
#VU48961 - Stack-based buffer overflow
CVE-2020-7559		 CWE-121 High
No
No
 15.0 19.11.2020 SB2020111109
#VU48963 - Improper Authorization
CVE-2020-28211		 CWE-285 Low
No
No
 15.0 19.11.2020 SB2020111109


Showing elements 1 - 20 out of 23