Vulnerabilities > Schneider Electric > Ecostruxure Machine Expert > High

DATE CVE VULNERABILITY TITLE RISK
2021-05-26 CVE-2021-22705 Unspecified vulnerability in Schneider-Electric Ecostruxure Machine Expert and Vijeo Designer
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert
local
low complexity
schneider-electric
7.8
2020-04-22 CVE-2020-7488 Cleartext Transmission of Sensitive Information vulnerability in Schneider-Electric products
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
network
low complexity
schneider-electric CWE-319
7.5