Vulnerabilities > Schneider Electric

DATE CVE VULNERABILITY TITLE RISK
2020-11-19 CVE-2020-28209 Unquoted Search Path or Element vulnerability in Schneider-Electric Enterprise Server Installer 1.9/3.1
A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agent service binary path, being able to gain the privilege of the user who started the service.
4.4
2020-11-19 CVE-2020-28210 Cross-site Scripting vulnerability in Schneider-Electric Ecostruxure Building Operation 2.0/3.1
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.
4.3
2020-11-18 CVE-2020-7564 Classic Buffer Overflow vulnerability in Schneider-Electric products
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.
network
low complexity
schneider-electric CWE-120
6.5
2020-11-18 CVE-2020-7563 Out-of-bounds Write vulnerability in Schneider-Electric products
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
network
low complexity
schneider-electric CWE-787
6.5
2020-11-18 CVE-2020-7562 Out-of-bounds Read vulnerability in Schneider-Electric products
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
5.8
2020-09-16 CVE-2020-7532 Deserialization of Untrusted Data vulnerability in Schneider-Electric Scadapack X70 Security Administrator 1.2.0
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.
6.8
2020-09-16 CVE-2020-7531 Unspecified vulnerability in Schneider-Electric Scadapack 7X Remote Connect 3.6.3.574
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.
6.8
2020-09-16 CVE-2020-7530 Unspecified vulnerability in Schneider-Electric Scadapack 7X Remote Connect 3.6.3.574
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders.
network
low complexity
schneider-electric
6.5
2020-09-16 CVE-2020-7529 Path Traversal vulnerability in Schneider-Electric Scadapack 7X Remote Connect 3.6.3.574
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.
4.3
2020-09-16 CVE-2020-7528 Deserialization of Untrusted Data vulnerability in Schneider-Electric Scadapack 7X Remote Connect 3.6.3.574
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.
6.8