Vulnerabilities (CVE)

Filtered by vendor Schneider-electric Subscribe
Filtered by product Ecostruxure Machine Expert
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7488 1 Schneider-electric 11 Ecostruxure Machine Expert, Modicon M218, Modicon M218 Firmware and 8 more 2022-02-03 5.0 MEDIUM 7.5 HIGH
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
CVE-2021-22705 1 Schneider-electric 9 Ecostruxure Machine Expert, Harmony Gk, Harmony Gto and 6 more 2022-01-31 4.6 MEDIUM 7.8 HIGH
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert