Known vulnerabilities in EcoStruxure Power Operation

Vendor: Schneider Electric
Software: EcoStruxure Power Operation
Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_power_operation:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoStruxure Power Operation EcoStruxure Power Operation is affected by 8 known vulnerabilities: 1 critical, 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8401		 CWE-79 Low
No
No
 2021 CU3 Hotfix 2, 2022 CU4 04.02.2025 SB2025020453
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 2024 CU2 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU85743 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50447		 CWE-94 High
No
No
 2024 CU2 24.01.2024 SB2024012413
SB2024012417
SB2024012465
and 34 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2024 CU2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217		 CWE-122 Critical
Available
Exploited
 2024 CU2 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU78293 - Missing release of memory after effective lifetime
CVE-2023-35945		 CWE-401 Medium
No
No
 2024 CU2 16.07.2023 SB2023071620
SB2023080913
SB2023081405
and 18 more
#VU69498 - Resource Management Errors
CVE-2022-45198		 CWE-399 Medium
No
No
 2024 CU2 22.11.2022 SB2022112230
SB2022112234
SB2022121360
and 3 more
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817		 CWE-749 High
No
No
 2024 CU2 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more