Vulnerabilities > Schneider Electric > 140Cpu65 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-04-19 CVE-2023-25620 Unspecified vulnerability in Schneider-Electric products
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.
network
low complexity
schneider-electric
6.5
2022-02-04 CVE-2020-7534 Cross-Site Request Forgery (CSRF) vulnerability in Schneider-Electric products
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in.
network
low complexity
schneider-electric CWE-352
8.8