Ecostruxure Control Expert Security Vulnerabilities and Issues — Ecostruxure Control Expert CVE List

Lucene search

Schneider-electricEcostruxure Control Expert

4 matches found

CVE•added 2023/01/31 6:15 a.m.•73 views

CVE-2022-45789

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Version...

9.8CVSS9.3AI score0.00057EPSS

CVE•added 2023/01/30 1:15 p.m.•63 views

CVE-2022-45788

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All V...

9.8CVSS9.5AI score0.00293EPSS

CVE•added 2023/04/18 5:15 p.m.•45 views

CVE-2023-1548

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user toperform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)

5.5CVSS5.4AI score0.00021EPSS

CVE•added 2023/04/18 5:15 p.m.•43 views

CVE-2023-27976

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could causeremote code execution when a valid user visits a malicious link provided through the webendpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)

8.8CVSS8.8AI score0.00426EPSS