Vulnerabilities

TI-2024-00526 CVE-2024-0568 · GHSA-7392-524j-vvwv

Improper authentication in Schneider Electric Harmony Control Relay RMNF22TB30

MEDIUM 40

CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communication.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0031 Published 2024-02-14 No fix listed CWE-287

TI-2023-18833 CVE-2023-37200 · GHSA-mhjw-pxqp-cm9c

XML external entity injection in Schneider Electric EcoStruxure OPC UA Server Expert

LOW 24

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2023-07-12 No fix listed CWE-611

TI-2020-06019 CVE-2020-7496 · GHSA-wcx9-vc6g-982m

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator…

LOW 36

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00884 Published 2020-06-16 No fix listed CWE-88

Vulnerabilities

Filters

Improper authentication in Schneider Electric Harmony Control Relay RMNF22TB30

XML external entity injection in Schneider Electric EcoStruxure OPC UA Server Expert

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator…