schneider-electric gp-pro ex vulnerabilities and exploits

(subscribe to this query)

9.1

CVSSv3

The FTP server in Pro-face GP-Pro EX EX-ED prior to 4.05.000, PFXEXEDV prior to 4.05.000, PFXEXEDLS prior to 4.05.000, and PFXEXGRPLS prior to 4.05.000 has hardcoded credentials, which makes it easier for remote malicious users to bypass authentication by leveraging knowledge of ...

Schneider-electric Proface Gp-pro Ex Ex-ed Schneider-electric Proface Gp-pro Ex Pfxexedls Schneider-electric Proface Gp-pro Ex Pfxexedv Schneider-electric Proface Gp-pro Ex Pfxexgrpls

8.8

CVSSv3

An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched.

Schneider-electric Pro-face Gp-pro Ex

8.8

CVSSv3

Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED prior to 4.05.000, PFXEXEDV prior to 4.05.000, PFXEXEDLS prior to 4.05.000, and PFXEXGRPLS prior to 4.05.000 allows remote malicious users to execute arbitrary code via unspecified vectors.

Schneider-electric Proface Gp-pro Ex Ex-ed Schneider-electric Proface Gp-pro Ex Pfxexedls Schneider-electric Proface Gp-pro Ex Pfxexedv Schneider-electric Proface Gp-pro Ex Pfxexgrpls

7.8

CVSSv3

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software.

Schneider-electric Gp-pro Ex

7.8

CVSSv3

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an malicious user to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the pr...

Schneider-electric Pro-face Gp Pro Ex 4.07.000

6.5

CVSSv3

A CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100 which could cause the discovery of the password when the user is entering the password because it is not masqueraded.

Schneider-electric Gp-pro Ex Firmware

6.5

CVSSv3

Pro-face GP-Pro EX EX-ED prior to 4.05.000, PFXEXEDV prior to 4.05.000, PFXEXEDLS prior to 4.05.000, and PFXEXGRPLS prior to 4.05.000 allow remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

Schneider-electric Proface Gp-pro Ex Ex-ed Schneider-electric Proface Gp-pro Ex Pfxexedls Schneider-electric Proface Gp-pro Ex Pfxexedv Schneider-electric Proface Gp-pro Ex Pfxexgrpls

6.5

CVSSv3

Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED prior to 4.05.000, PFXEXEDV prior to 4.05.000, PFXEXEDLS prior to 4.05.000, and PFXEXGRPLS prior to 4.05.000 allows remote malicious users to execute arbitrary code via unspecified vectors.

Schneider-electric Proface Gp-pro Ex Ex-ed Schneider-electric Proface Gp-pro Ex Pfxexedls Schneider-electric Proface Gp-pro Ex Pfxexedv Schneider-electric Proface Gp-pro Ex Pfxexgrpls

5.3

CVSSv3

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.

Schneider-electric Pro-face Gp-pro Ex

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook