Known vulnerabilities in SCADAPack RemoteConnect for x70

Vendor: Schneider Electric
Software: SCADAPack RemoteConnect for x70
Software CPE: cpe:2.3:a:schneider_electric:scadapack_remoteconnect_for_x70:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCADAPack RemoteConnect for x70 SCADAPack RemoteConnect for x70 is affected by 7 known vulnerabilities: 3 high, 4 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56670 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22796		 CWE-22 High
No
No
 - 17.09.2021 SB2021091701
#VU54866 - Missing Encryption of Sensitive Data
CVE-2021-22782		 CWE-311 Medium
No
No
 - 14.07.2021 SB2021071414
#VU54865 - Insufficiently Protected Credentials
CVE-2021-22781		 CWE-522 Medium
No
No
 - 14.07.2021 SB2021071414
#VU54864 - Insufficiently Protected Credentials
CVE-2021-22780		 CWE-522 Medium
No
No
 - 14.07.2021 SB2021071414
#VU54863 - Authentication Bypass by Spoofing
CVE-2021-22779		 CWE-290 High
No
No
 - 14.07.2021 SB2021071415
#VU54862 - Insufficiently Protected Credentials
CVE-2021-22778		 CWE-522 High
No
No
 - 14.07.2021 SB2021071414
#VU49956 - Deserialization of Untrusted Data
CVE-2020-12525		 CWE-502 Medium
No
No
 - 22.01.2021 SB2021012509
SB2021071415