PB
Product
Pro-face BLUE
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 0Low 0
Watch
Add Pro-face BLUE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28221 | 9.8 | Jan 26 | A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause… Affected: 3.1; 3.1 |
| CVE-2023-1049 | 7.8 | Jun 14 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project… Affected: before 3.3; 3.3; 3.3 |
| CVE-2022-41667 | 7.8 | Nov 4 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41668 | 7.8 | Nov 4 | A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41669 | 7.8 | Nov 4 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41670 | 7.8 | Nov 4 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41671 | 7.8 | Nov 4 | A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a… Affected: V3.3 through Hotfix 1 |
| CVE-2022-41666 | 7.8 | Nov 4 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to… Affected: V3.3 through Hotfix 1 |
Showing 8