EO
Product
EcoStruxure Operator Terminal Expert
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 1Low 0
Watch
Add EcoStruxure Operator Terminal Expert to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-1049 | 7.8 | Jun 14 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project… Affected: before 3.3; 3.3; 3.3 |
| CVE-2022-41667 | 7.8 | Nov 4 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41669 | 7.8 | Nov 4 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41670 | 7.8 | Nov 4 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41671 | 7.8 | Nov 4 | A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41666 | 7.8 | Nov 4 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41668 | 7.8 | Nov 4 | A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share… Affected: V3.3 through Hotfix 1 |
| CVE-2020-7494 | 7.8 | Jun 16 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior… Affected: through 3.0; 3.1; 3.1 |
| CVE-2020-7493 | 7.8 | Jun 16 | A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and… Affected: through 3.0; 3.1; 3.1 |
Showing 9