Lucene search
+L

327 matches found

Positive Technologies
Positive Technologies
•added 2021/08/10 12:00 a.m.•8 views

PT-2021-7830

Name of the Vulnerable Software and Affected Versions Modicon M580 CPU versions all Modicon M340 CPU versions all Modicon MC80 versions all Modicon Momentum Ethernet CPU versions all PLC Simulator for EcoStruxure Control Expert versions all PLC Simulator for EcoStruxure Process Expert versions al...

6.8CVSS6.1AI score0.00839EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/07/30 12:00 a.m.•21 views

EcoStruxure Control Expert PLC Code Execution

The vulnerability of the programming software for PLCs programmable logic controllers, namely EcoStruxure Control Expert, and the microsoftware for Schneider Electric Modicon M340 programmable logic controllers, exists due to the lack of measures to neutralize certain components. Exploiting this...

10CVSS8.1AI score0.01581EPSS
SaveExploits0References4Affected Software3
osv_cve
osv_cve
•added 2021/07/14 3:15 p.m.•21 views

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5CVSS6.1AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/14 3:15 p.m.•32 views

CVE-2021-22779

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

9.1CVSS0.01051EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/14 3:15 p.m.•45 views

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5CVSS0.00236EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/14 3:15 p.m.•43 views

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/14 3:15 p.m.•34 views

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS0.00216EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/14 3:15 p.m.•34 views

Information disclosure

Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

2.1CVSS6AI score0.00109EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/07/14 3:15 p.m.•43 views

Design/Logic Flaw

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

2.1CVSS6.3AI score0.00236EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/14 3:15 p.m.•11 views

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS7AI score0.00216EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/14 3:15 p.m.•14 views

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5CVSS6.3AI score0.00236EPSS
SaveExploits0References2
Prion
Prion
•added 2021/07/14 3:15 p.m.•42 views

Design/Logic Flaw

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

6.4CVSS9AI score0.01051EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/07/14 3:15 p.m.•37 views

Design/Logic Flaw

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

3.6CVSS7.3AI score0.00217EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/14 3:15 p.m.•10 views

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS7AI score0.00217EPSS
SaveExploits0References2
Prion
Prion
•added 2021/07/14 3:15 p.m.•48 views

Design/Logic Flaw

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

3.6CVSS7.2AI score0.00216EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/14 2:26 p.m.•50 views

CVE-2021-22782

Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/14 2:26 p.m.•93 views

CVE-2021-22782

CVE-2021-22782 is a Missing Encryption of Sensitive Data vulnerability affecting Schneider Electric products, including EcoStruxure Control Expert (Unity Pro), EcoStruxure Process Expert, and SCADAPack RemoteConnect for x70. The issue allows information disclosure of network/process data, credent...

5.5CVSS5.3AI score0.00109EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2021/07/14 2:26 p.m.•84 views

CVE-2021-22781

CVE-2021-22781 affects Schneider Electric EcoStruxure Control Expert (and Unity Pro), EcoStruxure Process Expert, and SCADAPack RemoteConnect for x70. Description: an Insufficiently Protected Credentials vulnerability could allow a leak of SMTP credentials used for mailbox authentication when an ...

5.5CVSS5.5AI score0.00236EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2021/07/14 2:26 p.m.•52 views

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.8AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/14 2:26 p.m.•61 views

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1AI score0.00217EPSS
SaveExploits0References1
Rows per page
Query Builder