EI
Product
EcoStruxure IT Gateway
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add EcoStruxure IT Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10575 | 9.8 | Nov 13 | CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices Affected: Version 1.21.0.6; Version 1.22.0.3; Version 1.22.1.5; Version 1.23.0.4 |
| CVE-2024-0865 | 7.8 | Jun 12 | CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user Affected: before 1.21.0 |
| CVE-2020-10626 | 7.8 | May 14 | In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside… Affected: 1.5.0.66 through 1.5.2.28; 1.6.0.39 through 1.6.2.14; 1.7.0.64 |
Showing 3
