CVE-2026-2491

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw...

Schneider Electric EcoStruxure Power Monitoring Expert和Schneider Electric EcoStruxure Power Operation（Schneider Electric EPO） 代码问题漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation Schneider Electric EPO are both products of Schneider Electric, a French company. Schneider Electric EcoStruxure Power Monitoring Expert is a device used for power distribution monitoring in...

PT-2026-28859

Уязвимость программного обеспечения энергомониторинга EcoStruxure Power Monitoring Expert связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web API implementation, which listens on TCP po...

CVE-2021-22826

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2020-7545

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow for arbitrary code execution on the server when an authorized user access an affected webpage...

EUVD-2020-28672

Malware in sbrugna...

EUVD-2020-28671

Malware in sbrugna...

EUVD-2018-19509

Malware in sbrugna...

EUVD-2022-27870

Malicious code in bioql PyPI...

EUVD-2021-9962

Malicious code in bioql PyPI...

EUVD-2022-27947

Malicious code in bioql PyPI...

EUVD-2021-9961

Malicious code in bioql PyPI...

EUVD-2022-27869

Malicious code in bioql PyPI...

EcoStruxure Power Monitoring Expert Path Traversal

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

EcoStruxure Power Monitoring Expert Path Traversal

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction of the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

EcoStruxure Power Monitoring Expert Information Disclosure

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the ability to disclose information in the erroneous data range. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

EcoStruxure Power Monitoring Expert SRF

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software-related programs is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

EcoStruxure Power Monitoring Expert SSRF

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software-related programs is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...