Schneider Electric Ecostruxure Power Monitoring Expert vulnerabilities
2 vulnerabilities
Known vulnerabilities in Schneider Electric Ecostruxure Power Monitoring Expert, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-5391schneider electricecostruxure power monitoring expert+2
EPSS score0.92%
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to
execute arbitrary code on the targeted system by sending a specifically crafted packet to the
application.CVE-2023-28003schneider electricecostruxure power monitoring expert+1EPSS score0.32%
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to
maintain unauthorized access over a hijacked session in PME after the legitimate user has
signed out of their account.