schneider-electric pro-face blue vulnerabilities and exploits

(subscribe to this query)

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or pr...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Opera...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue Schneider-electric Pro-face Blue 3.3 Schneider-electric Ecostruxure Operator Terminal Expert 3.3

A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Ex...

Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue Schneider-electric Pro-face Blue 3.3 Schneider-electric Ecostruxure Operator Terminal Expert 3.3

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Termi...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution ...

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

Schneider-electric Ecostruxure Operator Terminal Expert 3.3 Schneider-electric Ecostruxure Operator Terminal Expert Schneider-electric Pro-face Blue 3.3 Schneider-electric Pro-face Blue

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI.

Schneider-electric Ecostruxure Operator Terminal Expert 3.1 Schneider-electric Pro-face Blue 3.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook