Known vulnerabilities in EcoStruxure Machine Expert

Vendor: Schneider Electric
Software: EcoStruxure Machine Expert
Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_machine_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoStruxure Machine Expert EcoStruxure Machine Expert is affected by 4 known vulnerabilities: 1 high, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58500 - Insufficient Entropy
CVE-2021-22799		 CWE-331 Low
No
No
 - 03.12.2021 SB2021120302
#VU27384 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-7489		 CWE-74 High
No
No
 - 28.04.2020 SB2020042815
#VU27383 - Insufficient Verification of Data Authenticity
CVE-2020-7487		 CWE-345 Low
No
No
 - 28.04.2020 SB2020042815
#VU27382 - Cleartext Transmission of Sensitive Information
CVE-2020-7488		 CWE-319 Low
No
No
 - 28.04.2020 SB2020042815