Known vulnerabilities in EcoStruxure Process Expert

Known vulnerabilities in EcoStruxure Process Expert

Vendor: Schneider Electric

Software: EcoStruxure Process Expert

Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*

Website: https://www.schneider-electric.com/ww/en/

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU105925 - Improper Privilege Management CVE-2025-0327	CWE-269	Low	No	No	4.8.0.5715	21.03.2025	SB2025032114
#VU101041 - Insufficiently Protected Credentials CVE-2023-27975	CWE-522	Low	No	No	2023	29.11.2024	SB2024112909
#VU101040 - Use of Hard-coded Credentials CVE-2023-6409	CWE-798	High	No	No	2023	29.11.2024	SB2024112909
#VU78552 - Improper Check for Unusual or Exceptional Conditions CVE-2022-45788	CWE-754	Medium	No	No	V2021	24.07.2023	SB2023072411
#VU58500 - Insufficient Entropy CVE-2021-22799	CWE-331	Low	No	No	-	03.12.2021	SB2021120302
#VU56670 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-22796	CWE-22	High	No	No	-	17.09.2021	SB2021091701
#VU54866 - Missing Encryption of Sensitive Data CVE-2021-22782	CWE-311	Medium	No	No	-	14.07.2021	SB2021071414
#VU54865 - Insufficiently Protected Credentials CVE-2021-22781	CWE-522	Medium	No	No	-	14.07.2021	SB2021071414
#VU54864 - Insufficiently Protected Credentials CVE-2021-22780	CWE-522	Medium	No	No	-	14.07.2021	SB2021071414
#VU54863 - Authentication Bypass by Spoofing CVE-2021-22779	CWE-290	High	No	No	V2021	14.07.2021	SB2021071415
#VU54862 - Insufficiently Protected Credentials CVE-2021-22778	CWE-522	High	No	No	-	14.07.2021	SB2021071414
#VU49956 - Deserialization of Untrusted Data CVE-2020-12525	CWE-502	Medium	No	No	-	22.01.2021	SB2021012509 SB2021071415