Product by Schneider Electric
Ecostruxure™ Control Expert
64 known vulnerabilities in Ecostruxure™ Control Expert (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
64
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
19
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-7842 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Authentication Bypass | 9.8 | |
| Critical | CVE-2018-7846 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: security vulnerability | 9.8 | |
| Critical | CVE-2019-6808 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Improper Access Control | 9.8 | |
| High | CVE-2021-22797 | Schneider Electric EcoStruxure Control Expert: Path Traversal | 7.8 | |
| Critical | CVE-2018-7847 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Improper Access Control | 9.8 | |
| Critical | CVE-2020-28212 | Schneider Electric Ecostruxure Control Expert: Improper Restriction of Excessive Authentication Attempts | 9.8 | |
| Critical | CVE-2022-26507 | Att Xmill: Heap-Based Buffer Overflow | 9.8 | |
| High | CVE-2018-7852 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2018-7845 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Out-of-Bounds Read | 7.5 | |
| High | CVE-2018-7848 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Information Disclosure | 7.5 | |
| High | CVE-2018-7849 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2018-7844 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Information Disclosure | 7.5 | |
| High | CVE-2018-7843 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| Critical | CVE-2021-21829 | AT&T: Heap-based Buffer Overflow | 8.1 | |
| High | CVE-2018-7855 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| Critical | CVE-2021-21825 | AT&T: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2021-21830 | AT&T: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2020-7475 | Schneider Electric Ecostruxure Control Expert: Injection | 9.8 | |
| High | CVE-2019-6806 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Information Disclosure | 7.5 | |
| High | CVE-2018-7854 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2019-6807 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2020-7559 | Schneider Electric Ecostruxure Control Expert: Classic Buffer Overflow | 7.5 | |
| High | CVE-2018-7853 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2019-6809 | Schneider Electric Modicon: Uncaught Exception | 7.5 | |
| High | CVE-2020-7560 | Schneider Electric Unity PRO: Write-what-where Condition | 8.6 |