Ecostruxure Machine Expert Security Vulnerabilities and Issues — Ecostruxure Machine Expert CVE List

Lucene search

Schneider-electricEcostruxure Machine Expert

5 matches found

CVE•added 2020/04/22 7:15 p.m.•56 views

CVE-2020-7489

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, co...

9.8CVSS9.4AI score0.00473EPSS

CVE•added 2020/04/22 7:15 p.m.•53 views

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.

9.8CVSS9.5AI score0.00221EPSS

CVE•added 2021/05/26 8:15 p.m.•53 views

CVE-2021-22705

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert

7.8CVSS7.3AI score0.00058EPSS

CVE•added 2020/04/22 7:15 p.m.•36 views

CVE-2020-7488

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.

7.5CVSS7.3AI score0.00188EPSS

CVE•added 2021/09/02 5:15 p.m.•35 views

CVE-2021-22704

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that coul...

9.1CVSS8.7AI score0.00601EPSS