schneider-electric ecostruxure operator terminal expert vulnerabilities and exploits

(subscribe to this query)

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the pr...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Ecostruxure Operator Terminal Expert 3.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized writ...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Ecostruxure Operator Terminal Expert 3.1

A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening ...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Ecostruxure Operator Terminal Expert 3.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause arbitrary application execution when the comp...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Ecostruxure Operator Terminal Expert 3.1

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or pr...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Opera...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue Schneider-electric Pro-face Blue 3.3 Schneider-electric Ecostruxure Operator Terminal Expert 3.3

A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Ex...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue Schneider-electric Pro-face Blue 3.3 Schneider-electric Ecostruxure Operator Terminal Expert 3.3

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Termi...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution ...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook