Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 Web Page Generation cross site scripting


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 (SCADA Software) and classified as problematic. This vulnerability affects an unknown functionality of the component Web Page Generation Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 Web Page Generation cross site scripting


📈 112.77 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 Web Page Generation cross site scripting


📈 112.77 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Building Operation WebStation up to 3.1 Web Page Generation cross site scripting


📈 86.39 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 Access Control access control


📈 85.27 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 unrestricted upload


📈 85.27 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Building Operation WebReports up to 3.1 XML External Entity xml external entity reference


📈 85.27 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure/SmartStruxure Web Page Generation cross site scripting


📈 68.98 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Building Operation Enterprise Server Installer unquoted search path


📈 58.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0865 | Schneider Electric EcoStruxure IT Gateway hard-coded credentials (Replaced by VDB-254451)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure/SmartStruxure access control [CVE-2020-7547]


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Control Expert PLC Simulator buffer overflow


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-7489 | Schneider Electric EcoStruxure Machine Expert Downstream Component injection


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Control Expert PLC Simulator authorization


📈 41.48 Punkte
🕵️ Sicherheitslücken

📰 Schneider Electric EcoStruxure Power Design


📈 41.48 Punkte
📰 IT Security Nachrichten

🕵️ Schneider Electric EcoStruxure Control Expert PLC Simulator excessive authentication


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-27975 | Schneider Electric EcoStruxure Control Expert Project File insufficiently protected credentials (SEVD-2024-044-01)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Control Expert PLC Simulator code download


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6409 | Schneider Electric EcoStruxure Control Expert Project File hard-coded credentials (SEVD-2024-044-01)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Control Expert PLC Simulator unusual condition


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-5986 | Schneider Electric EcoStruxure Power Monitoring Expert redirect (SEVD-2023-318-02)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric EcoStruxure Operator Terminal Expert privileges management


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41671 | Schneider Electric EcoStruxure Operator Terminal Expert up to 3.3 Hotfix 1 sql injection (SEVD-2022-284-01)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Details on a pair of bugs used at Pwn2Own Miami to get code execution on Schneider Electric’s EcoStruxure Operator Terminal Expert


📈 41.48 Punkte
🕵️ Reverse Engineering

🕵️ CVE-2022-41668 | Schneider Electric EcoStruxure Operator Terminal Expert up to 3.3 Hotfix 1 Project Conversion type conversion (SEVD-2022-284-01)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Performing SQL Backflips to Achieve Code Execution on Schneider Electric’s EcoStruxure Operator Terminal Expert at Pwn2Own Miami 2020


📈 41.48 Punkte
🕵️ Hacking

🕵️ CVE-2022-41669 | Schneider Electric EcoStruxure Operator Terminal Expert up to 3.3 Hotfix 1 SGIUtility signature verification (SEVD-2022-284-01)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2020-7493: Schneider-electric Ecostruxure operator terminal expert


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41666 | Schneider Electric EcoStruxure Operator Terminal Expert signature verification (SEVD-2022-284-01)


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ Schneider Electric fixes DoS flaws in Modicon, EcoStruxure products


📈 41.48 Punkte
🕵️ Hacking

🕵️ Schneider Electric EcoStruxure Geo SCADA Expert 2020 unknown vulnerability


📈 41.48 Punkte
🕵️ Sicherheitslücken

📰 Schneider Electric Patches Vulnerabilities in Modicon, EcoStruxure Products


📈 41.48 Punkte
📰 IT Security Nachrichten

🕵️ Schneider Electric EcoStruxure Power Build Rapsody up to 2.1.13 unrestricted upload


📈 41.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-5679 | Schneider Electric EcoStruxure Foxboro DCS Core Control Services up to 9.8 Kernel Memory Foxboro.sys out-of-bounds write (SEVD-2024-191-02)


📈 41.48 Punkte
🕵️ Sicherheitslücken

📰 EcoStruxure Data Center: Schneider Electric präsentiert neue Lösungen für hybride IT-Infrastrukturen


📈 41.48 Punkte
📰 IT Security Nachrichten

🕵️ Schneider Electric EcoStruxure Power Build Rapsody up to 2.1.13 unrestricted upload


📈 41.48 Punkte
🕵️ Sicherheitslücken

matomo
•