Schneider Electric U Luki w zabezpieczeniach

Oś czasu

Wersja

1.3.018
1.3.118
1.3.218
1.3.318
1.2.010

Przeciwdziałanie

Official Fix18
Temporary Fix0
Workaround0
Unavailable0
Not Defined16

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined34

Wektor dostępu

Not Defined0
Physical0
Local6
Adjacent0
Network28

Uwierzytelnianie

Not Defined0
High0
Low12
None22

Interakcja z użytkownikiem

Not Defined0
Required6
None28

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤56
≤64
≤72
≤812
≤98
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤56
≤64
≤72
≤812
≤98
≤100

VulDB

≤10
≤20
≤30
≤46
≤52
≤62
≤76
≤818
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤54
≤64
≤74
≤84
≤98
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k4
<2k12
<5k18
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k34
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (6): 1.2, 1.2.1, 1.3, 1.3.1, 1.3.2, 1.3.3

Link to Product Website: https://www.schneider-electric.com/

Typ oprogramowania: Automation Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2020-06-168.58.5Schneider Electric U.motion Server/Touch Panel sql injection$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-7500
2020-06-166.46.4Schneider Electric U.motion Server/Touch Panel Access Control privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-7499
2019-09-178.58.5Schneider Electric U.motion Server Message Format String$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-6840
2019-09-177.57.5Schneider Electric U.motion Server Access Control privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2019-6839
2019-09-175.45.4Schneider Electric U.motion Server Access Control privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-6838
2019-09-178.28.2Schneider Electric U.motion Server privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2019-6837
2019-09-177.47.4Schneider Electric U.motion Server Access Control privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2019-6836
2019-09-174.44.4Schneider Electric U.motion Server cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-6835
2018-07-035.35.1Schneider Electric U.motion Builder privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-7787
2018-07-035.24.9Schneider Electric U.motion Builder cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-7786

24 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 24 results.

więcej wpisów autorstwa Schneider Electric

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!