Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-31	CVE-2022-45789	Authentication Bypass by Capture-replay vulnerability in Schneider-Electric products A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. network low complexity schneider-electric CWE-294 critical	9.8
2023-01-30	CVE-2022-45788	Improper Check for Unusual or Exceptional Conditions vulnerability in Schneider-Electric products A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. network low complexity schneider-electric CWE-754 critical	9.8