Product by Schneider Electric
Ecostruxure™ Process Expert
30 known vulnerabilities in Ecostruxure™ Process Expert (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2021-22797 | Schneider Electric EcoStruxure Control Expert: Path Traversal | 7.8 | |
| Critical | CVE-2022-26507 | Att Xmill: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-21829 | AT&T: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2021-21825 | AT&T: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2021-21830 | AT&T: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2022-45789 | Schneider Electric EcoStruxure Control Expert: Authentication Bypass by Capture-replay | 8.1 | |
| Critical | CVE-2021-22779 | Schneider Electric Ecostruxure Control Expert: Authentication Bypass by Spoofing | 9.1 | |
| Critical | CVE-2022-45788 | Schneider Electric EcoStruxure Control Expert: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Critical | CVE-2021-21826 | AT&T: Classic Buffer Overflow | 8.1 | |
| Critical | CVE-2021-21810 | AT&T Labs: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2021-21811 | AT&T: Integer Underflow (Wrap or Wraparound) | 8.1 | |
| Critical | CVE-2021-21828 | AT&T: Classic Buffer Overflow | 8.1 | |
| Critical | CVE-2021-21827 | AT&T: Classic Buffer Overflow | 8.1 | |
| Critical | CVE-2022-37300 | Schneider Electric EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password | 9.8 | |
| Medium | CVE-2022-24323 | Schneider Electric EcoStruxure Process Expert: Improper Check for Unusual or Exceptional Conditions | 5.3 | |
| High | CVE-2025-0327 | Schneider Electric EcoStruxure Process Expert: Improper Privilege Management | 7.8 | |
| High | CVE-2023-6408 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel | 8.1 | |
| High | CVE-2025-13905 | Schneider Electric EcoStruxure™ Process Expert: Incorrect Default Permissions | — | |
| Medium | CVE-2022-24322 | Schneider Electric EcoStruxure Control Expert: Improper Restriction of Operations within the Bounds of a Memory Buffer | 5.3 | |
| High | CVE-2021-21814 | AT&T: security vulnerability | 7.8 | |
| High | CVE-2023-6409 | Schneider Electric EcoStruxure Control Expert: Use of Hard-coded Credentials | 7.7 | |
| High | CVE-2021-21815 | AT&T: Stack-Based Buffer Overflow | 7.8 | |
| High | CVE-2021-21813 | AT&T: Stack-Based Buffer Overflow | 7.8 | |
| High | CVE-2021-21812 | AT&T: Stack-Based Buffer Overflow | 7.8 | |
| Medium | CVE-2024-10083 | Schneider Electric Uni-Telway driver: Improper Input Validation | 5.5 |