Se

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Se records in CISA KEV

No Se vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ecostruxure Opc Ua Server Expert 1 record LOW Ecostruxure Operator Terminal Expert 1 record LOW Renf22r2mmw Firmware 1 record MEDIUM Rmnf22tb30 Firmware 1 record MEDIUM

Records

3 records

TI-2024-00526 CVE-2024-0568 · GHSA-7392-524j-vvwv

Improper authentication in Schneider Electric Harmony Control Relay RMNF22TB30

MEDIUM 40

CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communication.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0031 Published 2024-02-14 No fix listed CWE-287

TI-2020-06019 CVE-2020-7496 · GHSA-wcx9-vc6g-982m

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator…

LOW 36

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00884 Published 2020-06-16 No fix listed CWE-88

TI-2023-18833 CVE-2023-37200 · GHSA-mhjw-pxqp-cm9c

XML external entity injection in Schneider Electric EcoStruxure OPC UA Server Expert

LOW 24

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2023-07-12 No fix listed CWE-611

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0