Known vulnerabilities in EcoStruxure IT Gateway

Vendor: Schneider Electric
Software: EcoStruxure IT Gateway
Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_it_gateway:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoStruxure IT Gateway EcoStruxure IT Gateway is affected by 3 known vulnerabilities: 1 high, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100929 - Missing Authorization
CVE-2024-10575		 CWE-862 High
No
No
 1.23.1.10 26.11.2024 SB2024112641
#VU86751 - Use of Hard-coded Credentials
CVE-2024-0865		 CWE-798 Low
No
No
 1.21 23.02.2024 SB2024022310
#VU27554 - Uncontrolled Search Path Element
CVE-2020-10626		 CWE-427 Low
No
No
 1.8.1 06.05.2020 SB2020050601