Lucene search
+L

341 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:08 p.m.13 views

CVE-2020-7517

A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to read user credentials...

5.5CVSS6.8AI score0.00216EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.13 views

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has vulnerabilities related to insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges by modifying binary data...

7.8CVSS5.5AI score0.00172EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2024/10/11 12:00 a.m.6 views

Schneider Electric Easergy Studio 安全漏洞

Schneider Electric Easergy Studio is an IED support software for setup and configuration from Schneider Electric France. A security vulnerability exists in Schneider Electric Easergy Studio version 9.3.1 and prior versions, which arises from improper privilege management and could result in...

7.8CVSS6.4AI score0.00172EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/12 6:15 p.m.7 views

CVE-2024-2747

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...

7.8CVSS5.8AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/12 6:15 p.m.37 views

CVE-2024-2747

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...

7.8CVSS0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/12 5:12 p.m.37 views

CVE-2024-2747

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...

7.8CVSS0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/12 5:12 p.m.22 views

CVE-2024-2747

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...

7.8CVSS7.4AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.11 views

Schneider Electric Easergy Studio Code Issue Vulnerability

Schneider Electric Easergy Studio is an IED support software for setup and configuration from Schneider Electric France. A code issue vulnerability exists in Schneider Electric Easergy Studio v9.3.3 and prior versions, which stems from an unquoted search path or element vulnerability that could...

7.8CVSS7AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.13 views

PT-2024-2668 · Schneider Electric · Easergy Studio

Name of the Vulnerable Software and Affected Versions: Easergy Studio affected versions not specified Description: A vulnerability exists in Easergy Studio due to an unquoted search path or element, which could cause privilege escalation when a valid user replaces a trusted file name on the syste...

7.8CVSS7.2AI score0.00166EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/04/09 12:00 a.m.18 views

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment lies in the absence of quotation marks when writing elements or search paths. This allows a malicious individual to exploit their privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS5.5AI score0.00166EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.12 views

Schneider Electric Easergy T200 Cross-Site Scripting Vulnerability

Schneider Electric Easergy T200 is an intelligent digital protection terminal from Schneider Electric France. It is mainly used for protection and control in power systems, helping to monitor and protect power equipment from faults and abnormal operations, thus ensuring the stable operation of th...

8.2CVSS6.2AI score0.0047EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.9 views

Schneider Electric Easergy T200 Security Vulnerability

Schneider Electric Easergy T200 is an intelligent digital protection terminal from Schneider Electric France. It is mainly used for protection and control in power systems to help monitor and protect power equipment from faults and abnormal operations, thus ensuring stable operation of the power...

7.5CVSS6.7AI score0.00513EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.7 views

Schneider Electric Easergy T200 Security Vulnerability

Schneider Electric Easergy T200 is an intelligent digital protection terminal from Schneider Electric France. It is mainly used for protection and control in power systems to help monitor and protect power equipment from faults and abnormal operations, thus ensuring stable operation of the power...

9.8CVSS6.8AI score0.00755EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:00 a.m.13 views

The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software used in Schneider Electric Easergy T200 remote control devices lies in the use of files and directories accessible to external parties. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

7.8CVSS5.5AI score0.00513EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.12 views

PT-2024-2037 · Schneider Electric · Schneider Electric Easergy T200

Name of the Vulnerable Software and Affected Versions: Schneider Electric Easergy T200 affected versions not specified Description: The issue is related to an improper restriction of excessive authentication attempts, which could allow an attacker to conduct brute-force attacks against the login...

10CVSS7.4AI score0.00755EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:00 a.m.8 views

The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices allows a intruder to gain unauthorized access to the system.

The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the system...

10CVSS5.6AI score0.00755EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:00 a.m.21 views

The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices allows a hacker to carry out cross-site scripting attacks.

The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

8.5CVSS5.2AI score0.0047EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.14 views

PT-2024-2039 · Schneider Electric · Schneider Electric Easergy T200

Name of the Vulnerable Software and Affected Versions: Schneider Electric Easergy T200 affected versions not specified Description: A Files or Directories Accessible to External Parties issue exists, potentially allowing unauthenticated files and logs exfiltration and download of files when an...

7.8CVSS7.3AI score0.00513EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2024/02/08 12:00 a.m.20 views

Schneider Electric Easergy Studio InitializeChannel Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric Easergy Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS7.6AI score0.00487EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:00 a.m.12 views

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has a vulnerability related to the restoration of unreliable data in memory. This vulnerability allows an intruder to gain increased privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.00487EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder