Lucene search
+L

120 matches found

CNNVD
CNNVD
added 2024/10/08 12:0 a.m.4 views

Schneider Electric EcoStruxure Power Monitoring Expert 代码问题漏洞

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France used for power distribution monitoring in IoT environments. A code issue vulnerability exists in the Schneider Electric EcoStruxure Power Monitoring Expert that stems from the presence of a...

7.3CVSS7.8AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.4 views

PT-2024-8104 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Monitoring Expert affected versions not specified Description: A Deserialization of Untrusted Data issue exists, which could allow code to be remotely executed on the server when unsafely deserialized data is posted to the w...

7.3CVSS8AI score0.00342EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.21 views

PT-2024-8122 · Unknown · Power Scada Operation +2

Name of the Vulnerable Software and Affected Versions: Power Monitoring Expert, Power Operation, Power SCADA Operation affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This...

5.5CVSS5.8AI score0.00287EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/12/15 12:0 a.m.27 views

Schneider Electric EcoStruxure Power Monitoring Expert GetFilteredSinkProvider Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetFilteredSinkProvider method. The issue...

9.8CVSS7.5AI score0.00844EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/21 12:0 a.m.11 views

Schneider Electric EcoStruxure Power Monitoring Expert Open Redirection Vulnerability

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, France, for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from an open redirection vulnerability, which stems from the system not...

8.2CVSS6.7AI score0.00453EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/15 12:0 a.m.6 views

Schneider Electric EcoStruxure Power Monitoring Expert Cross-Site Scripting Vulnerability

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France for power distribution monitoring in IoT environments. A security vulnerability exists in the Schneider Electric EcoStruxure Power Monitoring Expert that stems from a cross-site scripting...

6.1CVSS6.1AI score0.00406EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/15 12:0 a.m.10 views

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, France, for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from an open redirection vulnerability, which stems from the system not...

8.2CVSS6.7AI score0.00453EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:0 a.m.7 views

The vulnerability of the software used for creating control panels for energy management systems, namely EcoStruxure PowerSCADA Operation (PSO) – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation (EPO) – Advanced Reporting and Dashboards Module, and the energy monitoring software EcoStruxure Power Monitoring Expert, stems from the redirection of URLs to an unreliable website. This allows a hacker to redirect users to any arbitrary URL address.

The vulnerability of the software used for creating control panels for energy management systems, such as EcoStruxure PowerSCADA Operation PSO – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation EPO – Advanced Reporting and Dashboards Module, and the energy monitoring software...

9.4CVSS6.4AI score0.00453EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:0 a.m.10 views

The vulnerability of the software for creating control panels for energy management systems, namely EcoStruxure PowerSCADA Operation (PSO) – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation (EPO) – Advanced Reporting and Dashboards Module, and the energy monitoring software EcoStruxure Power Monitoring Expert, arises due to insufficient protection measures for the website structure. This allows attackers to execute arbitrary JavaScript code.

The vulnerability of the software used for creating control panels for energy management systems, such as EcoStruxure PowerSCADA Operation PSO – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation EPO – Advanced Reporting and Dashboards Module, and the energy monitoring software...

6.4CVSS6.7AI score0.00406EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.12 views

PT-2023-6877 · Schneider Electric · Ecostruxure Power Monitoring Expert +2

Name of the Vulnerable Software and Affected Versions: EcoStruxure PowerSCADA Operation PSO - Advanced Reporting and Dashboards Module versions affected versions not specified EcoStruxure PowerOperation EPO - Advanced Reporting and Dashboards Module versions affected versions not specified...

9.4CVSS6.4AI score0.00453EPSS
SaveExploits0References5
ICS
ICS
added 2023/10/17 6:0 a.m.73 views

Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : EcoStruxure Power Monitoring Expert, EcoStruxure Power Operation with Advanced Reports, EcoStruxure Power SCADA Operation with Advanced Reports Vulnerability :...

9.8CVSS10AI score0.00844EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.9 views

PT-2023-5872 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: Schneider Electric EcoStruxure Power Monitoring Expert versions affected versions not specified Description: A deserialization of untrusted data issue exists, allowing an attacker to execute arbitrary code on the targeted system by sending a...

9.8CVSS9.6AI score0.00844EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/10/04 12:0 a.m.7 views

Schneider Electric EcoStruxure Power Monitoring Expert Code Issue Vulnerability

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France that is used to perform power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from a code issue vulnerability that originates from...

9.8CVSS7.6AI score0.00844EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/08/03 2:7 a.m.5 views

SUSE CVE-2023-20583

A potential power side-channel vulnerability in AMD processors may allow an authenticated attacker to monitor the CPU power consumption as the data in a cache line changes over time potentially resulting in a leak of sensitive information...

4.7CVSS6.7AI score0.00262EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/01 12:0 a.m.4 views

AMD CPU Security Vulnerability

AMD CPUs are a family of CPUs from the American company Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from allowing an authenticated attacker to monitor data changes in CPU power, leading to information disclosure...

4.7CVSS6.4AI score0.00262EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:0 a.m.8 views

The vulnerability of the Power Monitoring Expert software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Power Monitoring Exper software-related system is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS6.6AI score0.00771EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/04/18 12:0 a.m.7 views

Schneider Electric EcoStruxure Power Monitoring Expert 代码问题漏洞

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France that is used to perform power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert has a code issue vulnerability that stems from the presence o...

8.8CVSS7.9AI score0.00318EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:0 a.m.8 views

The vulnerability of the EcoStruxure Power Monitoring Expert software lies in its incorrect session duration, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert software is related to incorrect session duration settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6.7CVSS7.6AI score0.00318EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.16 views

PT-2023-1876 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Monitoring Expert affected versions not specified Description: A CWE-613: Insufficient Session Expiration issue exists, allowing an attacker to maintain unauthorized access over a hijacked session after the legitimate user h...

8.8CVSS8.4AI score0.00318EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/03/11 12:0 a.m.8 views

The vulnerability of the Power Monitoring Expert software allows a intruder to view and modify the equipment settings.

The vulnerability of the Power Monitoring Exper software-related software is related to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to view and modify the settings of the equipment...

7.3CVSS7.7AI score0.01235EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder