Schneider Electric Ecostruxure Power Monitoring Expert Sårbarheter

Tidslinje

Version

20204
9.02

Åtgärd

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Utnyttjbarhet

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined11

Åtkomstvektor

Not Defined0
Physical0
Local0
Adjacent2
Network9

Autentisering

Not Defined0
High0
Low5
None6

Användarinteraktion

Not Defined0
Required8
None3

C3BM Index

Förra året

CVSSv3 Base

≤10
≤20
≤31
≤40
≤54
≤62
≤72
≤81
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤40
≤54
≤62
≤72
≤81
≤90
≤101

VulDB

≤10
≤20
≤31
≤40
≤56
≤61
≤70
≤82
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤91
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤91
≤101

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k2
<2k5
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k11
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

Förra året

🔴 CTI Aktiviteter

Affected Versions (2): 9.0, 2020

Link to Product Website: https://www.schneider-electric.com/

Programvarutyp: SCADA Software

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
15/11/20236.26.1Schneider Electric EcoStruxure Power Monitoring Expert Redirect$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-5986
15/11/20235.25.1Schneider Electric EcoStruxure Power Monitoring Expert cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-5987
05/10/20239.89.6Schneider Electric EcoStruxure Power Monitoring Expert Packet privilegier eskalering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-5391
19/04/20237.57.4Schneider Electric EcoStruxure Power Monitoring Expert svag autentisering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-28003
29/01/20224.94.7Schneider Electric EcoStruxure Power Monitoring Expert privilegier eskalering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22827
29/01/20224.94.7Schneider Electric EcoStruxure Power Monitoring Expert privilegier eskalering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22826
12/01/20222.62.5Schneider Electric EcoStruxure Power Monitoring Expert Web Page Generation cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-22804
12/01/20225.04.8Schneider Electric EcoStruxure Power Monitoring Expert privilegier eskalering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22727
12/01/20225.35.1Schneider Electric EcoStruxure Power Monitoring Expert lmadmin Tool förnekande av tjänsten$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2019-8963
12/01/20224.34.1Schneider Electric EcoStruxure Power Monitoring Expert informationsgivning$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22726

1 fler poster visas inte

fler inlägg av Schneider Electric

Do you want to use VulDB in your project?

Use the official API to access entries easily!