CVSS: 9.3EPSS: 0%CPEs: 8EXPL: 0CVE-2021-22797 – Schneider Electric EcoStruxure Control Expert Classic STU and STA File Parsing Directory Traversal Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-22797
20 Sep 2021 — A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x... • https://www.se.com/ww/en/download/document/SEVD-2021-257-01 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22792
https://notcve.org/view.php?id=CVE-2021-22792
02 Sep 2021 — A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including ... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22791
https://notcve.org/view.php?id=CVE-2021-22791
02 Sep 2021 — A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all U... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22790
https://notcve.org/view.php?id=CVE-2021-22790
02 Sep 2021 — A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Un... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22789
https://notcve.org/view.php?id=CVE-2021-22789
02 Sep 2021 — A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simula... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2021-22782
https://notcve.org/view.php?id=CVE-2021-22782
14 Jul 2021 — Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause an information leak allowing disclosure of network and process information, credentials or intellectual property when an attacker can access a project file. Se presenta una vulnerabilidad de ... • http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 • CWE-311: Missing Encryption of Sensitive Data •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2021-22781
https://notcve.org/view.php?id=CVE-2021-22781
14 Jul 2021 — Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause a leak of SMTP credential used for mailbox authentication when an attacker can access a project file. Se presenta una vulnerabilidad de credenciales insuficientemente protegidas en EcoStruxur... • http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 • CWE-522: Insufficiently Protected Credentials •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2021-22780
https://notcve.org/view.php?id=CVE-2021-22780
14 Jul 2021 — Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause unauthorized access to a project file protected by a password when this file is shared with untrusted sources. An attacker may bypass the password protection and be able to view and modify a ... • http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 • CWE-522: Insufficiently Protected Credentials •
CVSS: 9.1EPSS: 0%CPEs: 63EXPL: 0CVE-2021-22779
https://notcve.org/view.php?id=CVE-2021-22779
14 Jul 2021 — Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write m... • http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2021-22778
https://notcve.org/view.php?id=CVE-2021-22778
14 Jul 2021 — Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file. Se presenta una vulnerabilidad de credenciales insuficientemente protegidas en Ec... • http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 • CWE-522: Insufficiently Protected Credentials •