Product by Schneider Electric
Pro-face Blue
10 known vulnerabilities in Pro-face Blue (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2020-28221 | Schneider Electric Pro-face Blue: Improper Input Validation | 9.8 | |
| High | CVE-2024-2658 | Local privilege escalation in FlexNet Publisher | — | |
| High | CVE-2023-1049 | Schneider Electric EcoStruxure™ Operator Terminal Expert: Code Injection | 7.8 | |
| High | CVE-2020-7544 | EcoStruxureª Operator Terminal Expert runtime (Vijeo XD): Improper Privilege Management | 7.8 | |
| High | CVE-2022-41671 | Schneider Electric EcoStruxure Operator Terminal Expert: SQL Injection | 7.0 | |
| High | CVE-2022-41667 | Schneider Electric EcoStruxure Operator Terminal Expert: Path Traversal | 7.0 | |
| High | CVE-2022-41668 | Schneider Electric EcoStruxure Operator Terminal Expert: Incorrect Type Conversion or Cast | 7.0 | |
| High | CVE-2022-41670 | Schneider Electric EcoStruxure Operator Terminal Expert: Path Traversal | 7.0 | |
| High | CVE-2022-41666 | Schneider Electric EcoStruxure Operator Terminal Expert: Improper Verification of Cryptographic Signature | 7.0 | |
| High | CVE-2022-41669 | Schneider Electric EcoStruxure Operator Terminal Expert: Improper Verification of Cryptographic Signature | 7.0 |