CVE-2022-22727

A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link. Affected Product: EcoStruxure Power...

CVE-2022-22727

CVE-2022-22727 is an instance of an improper input validation (CWE-20) vulnerability in Schneider Electric’s EcoStruxure Power Monitoring Expert (versions 2020 and prior). The CVE describes that an unauthenticated attacker could view data, change settings, or impact availability, potentially affe...

CVE-2022-22726

CVE-2022-22726 affects EcoStruxure Power Monitoring Expert (versions 2020 and prior). The vulnerability is due to improper input validation (CWE-20) that could allow an authenticated user with a limited OS service account to read arbitrary files on the server. Impact indications in the sources sh...

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, a French company, for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert has a security vulnerability that stems from an incorrect input...

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, a French company, used for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from an input validation error vulnerability that stems from...

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22826

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22826

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22826

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

Input validation

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure? Power Monitoring Expert 9.0 and prior versions...

Input validation

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure? Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22827

CVE-2021-22827 corresponds to an improper input validation (CWE-20) vulnerability in EcoStruxure Power Monitoring Expert 9.0 and earlier. Red Hat entries corroborate that this flaw could lead to arbitrary code execution when a user visits a page containing the injected payload; this CVE is distin...

CVE-2021-22826

The connected Red Hat entries confirm CVE-2021-22826 is an input-validation flaw (CWE-20) in EcoStruxure Power Monitoring Expert 9.0 and earlier. The vulnerability allows arbitrary code execution when a user visits a page containing the injected payload. The issue is tied to CVE-2021-22827 as a s...

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France for power distribution monitoring in IoT environments. An input validation error vulnerability exists in Schneider Electric EcoStruxure Power Monitoring Expert version 9.0 and prior versions, which...

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France for power distribution monitoring in IoT environments. An input validation error vulnerability exists in Schneider Electric EcoStruxure Power Monitoring Expert version 9.0 and prior versions, which...

PT-2022-9295 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Monitoring Expert versions 9.0 and prior Description: A vulnerability exists due to improper input validation, which could lead to arbitrary code execution when a user visits a page containing a malicious payload...

PT-2022-6396 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Monitoring Expert versions 2020 and prior Description: The issue is related to insufficient input validation, which could allow a remote attacker to view and modify equipment settings. An unauthenticated attacker may be able...

The vulnerability of the software for power monitoring systems such as Power Monitoring Expert, EcoStruxure Energy Expert, Power Manager, data collection systems, and industrial automation control systems like StruxureWare PowerSCADA Expert, related to access control deficiencies, allows attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of the Power Monitoring Expert, EcoStruxure Energy Expert, Power Manager software, as well as systems for data collection and process control in industrial automation, such as StruxureWare PowerSCADA Expert, are related to lack of access control mechanisms. Exploiting these...