CVE-2021-22797

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the...

CVE-2021-22795

The CVE-2021-22795 entry affects Schneider Electric StruxureWare Data Center Expert (versions 7.8.1 and earlier) and is an OS Command Injection (CWE-78) vulnerability that could allow remote code execution over the network. Some sources indicate authentication may be required to exploit, while CV...

CVE-2021-22795

A CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert V7.8.1 and prior...

CVE-2021-22794

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert V7.8.1 and prior...

CVE-2021-22794

CVE-2021-22794 is a path traversal vulnerability in Schneider Electric’s StruxureWare Data Center Expert (versions 7.8.1 and prior). The issue arises from improper validation of user-supplied input in path handling, enabling remote code execution over the network with no authentication required a...

Security Bulletin: Vulnerability in Apache Log4j affects DB2 Recovery Expert for Linux, Unix and Windows

Summary Apache Log4j could allow a remote attacker to execute arbitrary code on the system. DB2 Recovery Expert for Linux, UNIX and Windows addressed this vulnerability. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on...

brandexpert.nl Improper Access Control vulnerability OBB-2426165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Vulnerabilities fixed in Schneider Electric Ecostruxure Control Expert

Vulnerabilities have been fixed in the Schneider Electric Ecostruxure Control Expert. The vulnerabilities allow an unauthenticated malicious person able to cause a denial-of-service cause. To exploit these vulnerabilities, a malicious party must be able to intercept specific Modbus data and...

CVE-2022-24322

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

CVE-2022-24322

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

Design/Logic Flaw

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

CVE-2022-24323

The CVE-2022-24323 entry describes CWE-754: Improper Check for Unusual or Exceptional Conditions leading to disruption of communication between Modicon controllers and engineering software when an attacker can intercept and manipulate certain Modbus response data. Affected products are EcoStruxur...

CVE-2022-24322

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

CVE-2022-24322

CVE-2022-24322 affects Schneider Electric EcoStruxure Control Expert (V15.0 SP1 and prior). The flaw is CWE-119: improper restriction of operations within buffer bounds, enabling disruption of communication between Modicon controllers and engineering software when an attacker intercepts and manip...

Schneider Electric EcoStruxure Control Expert和Schneider Electric EcoStruxure Process Exper 代码问题漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro and Schneider Electric EcoStruxure Process Exper are both products of Schneider Electric, France. Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller products...

Schneider Electric EcoStruxure Control Experta 缓冲区错误漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Control Expert V15.0 SP1 and earlier versions tha...