Schneider-Electric Ecostruxure Machine Expert vulnerabilities
2 known vulnerabilities affecting schneider-electric/ecostruxure_machine_expert.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2021-22704P3CRITICALCVSS 9.1fixed in 2.0v2.02021-09-02
CVE-2021-22704 [CRITICAL] CWE-22 CVE-2021-22704: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmon
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access
nvd
CVE-2021-22705P3HIGHCVSS 7.8fixed in 2.02021-05-26
CVE-2021-22705 [HIGH] CWE-119 CVE-2021-22705: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that co
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert
nvd