Schneider Electric vulnerabilities, page 5

711 vulnerabilities

Known vulnerabilities in Schneider Electric products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 899 products.

8HighCVE-2018-7771schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree.EPSS1.45%9.1CriticalCVE-2018-7237schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/set_param to the file name with the value of 'system.delete.sd_file'EPSS1.72%9.8CriticalCVE-2018-7780schneider electric se · pelco sarix professional v1 +20 moreschneider electric se pelco sarix professional v1In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".EPSS1.19%10CriticalCVE-2018-7243schneider electric se · 66074 mge network management card transverse installed in mge ups and mge sts +1 moreschneider electric se 66074 mge network management card transverse installed in mge ups and mge stsAn authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to get a full access to device, bypassing the authorization system.EPSS2.77%9.8CriticalCVE-2018-7785schneider electric se · u.motion builder +1 moreschneider electric se u.motion builderIn Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.EPSS2.97%4.3MediumCVE-2018-7764schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.EPSS1.33%7.5HighCVE-2018-7783schneider electric se · somachine basic +1 moreschneider electric se somachine basicSchneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of-band (OOB) attack. The vulnerability is triggered when input passed to the xml parser is not sanitized while parsing the xml project/template file.EPSS1.56%9.1CriticalCVE-2018-7245schneider electric se · 66074 mge network management card transverse installed in mge ups and mge sts +1 moreschneider electric se 66074 mge network management card transverse installed in mge ups and mge stsAn improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or other critical settings without authorization.EPSS1.24%4.3MediumCVE-2018-7763schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.EPSS1.33%4.3MediumCVE-2018-7776schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.EPSS0.68%8.8HighCVE-2018-7801schneider electric se · evlink parking v3.2.0-12_v1 and earlier +1 moreschneider electric se evlink parking v3.2.0-12_v1 and earlierA Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed.EPSS6.30%5.3MediumCVE-2018-7227schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.EPSS1.20%5.3MediumCVE-2018-7823schneider-electric · modicon_m221_firmwareschneider-electric modicon_m221_firmwareA Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause remote launch of SoMachine Basic when sending crafted ethernet message.EPSS1.34%8.8HighCVE-2018-7230schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.EPSS1.58%7.8HighCVE-2018-7239schneider electric se · somove +13 moreschneider electric se somoveA DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.EPSS2.82%7.5HighCVE-2018-7856schneider-electric · modicon_m340_firmware +3 moreschneider-electric modicon_m340_firmwareA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus.EPSS1.58%6.8MediumCVE-2018-7824schneider-electric · driver_suite +2 moreschneider-electric driver_suiteAn Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.EPSS0.88%5.4MediumCVE-2018-7827schneider-electric · d6220_firmware +58 moreschneider-electric d6220_firmwareA Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session.EPSS0.80%7.8HighCVE-2018-7814schneider electric se · eurotherm by schneider electric guicon v2.0 (gold build 683.0) +1 moreschneider electric se eurotherm by schneider electric guicon v2.0 (gold build 683.0)A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) which could cause remote code to be executed when parsing a GD1 fileEPSS1.23%7.8HighCVE-2018-7235schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'EPSS1.63%