schneider-electric

765 tracked vulnerabilities.

CVE-2021-22772 CRITICAL
Easergy T200 Firmware < SC2-04MOD-07000100 - Unauthenticated Critical Function Access
Jul 21, 2021
CVSS 9.8
EPSS 0.00
CVE-2021-22771 HIGH
Easergy T300 <V2.7.1 - Command Injection
Jul 21, 2021
CVSS 7.3
EPSS 0.00
CVE-2021-22770 MEDIUM
Easergy T300 <V2.7.1 - Info Disclosure
Jul 21, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-22730 CRITICAL
Schneider-electric Evlink City Evc1s22p4 Firmware < r8_v3.4.0.1 - Hard-coded Credentials
Jul 21, 2021
CVSS 9.8
EPSS 0.00
CVE-2021-22729 CRITICAL
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - Priv...
Jul 21, 2021
CVSS 9.8
EPSS 0.00
CVE-2021-22728 MEDIUM
Schneider-electric Evlink City Evc1s22p4 Firmware < r8_v3.4.0.1 - Information Disclosure
Jul 21, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-22727 CRITICAL
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - Info...
Jul 21, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-22726 HIGH
EVlink <R8 V3.4.0.1 - Server-Side Request Forgery via Charging Station Parameters
Jul 21, 2021
CVSS 8.1
EPSS 0.00
CVE-2021-22723 MEDIUM
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - CSRF
Jul 21, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-22722 MEDIUM
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - XSS
Jul 21, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-22721 MEDIUM
EVlink <R8 V3.4.0.1 - Info Disclosure
Jul 21, 2021
CVSS 5.3
EPSS 0.00
CVE-2021-22708 HIGH
Schneider-electric Evlink City Evc1s22p4 Firmware < r8_v3.4.0.1 - Signature Verification Bypass
Jul 21, 2021
CVSS 7.2
EPSS 0.00
CVE-2021-22707 CRITICAL NUCLEI
Schneider-electric Evlink City Evc1s22p4 Firmware < r8_v3.4.0.1 - Hard-coded Credentials
Jul 21, 2021
CVSS 9.8
EPSS 0.92
CVE-2021-22706 MEDIUM
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - XSS
Jul 21, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-22782 MEDIUM
EcoStruxure Control Expert < 15.0 SP1, EcoStruxure Process Expert, RemoteConnect - Missing Encryption of Sensitive Data
Jul 14, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-22781 MEDIUM
EcoStruxure Control Expert < 15.0 SP1, EcoStruxure Process Expert, SCADAPack RemoteConnect - SMTP Credentials Exposure
Jul 14, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-22780 HIGH
EcoStruxure Control Expert < 15.0 SP1, EcoStruxure Process Expert, RemoteConnect - Insufficiently Protected Credentials
Jul 14, 2021
CVSS 7.1
EPSS 0.00
CVE-2021-22779 CRITICAL
Schneider-electric Ecostruxure Control Expert < 15.0 - Authentication Bypass by Spoofing
Jul 14, 2021
CVSS 9.1
EPSS 0.00
CVE-2021-22778 HIGH
EcoStruxure Control Expert < 15.0 SP1, EcoStruxure Process Expert, SCADAPack RemoteConnect - Credential Exposure
Jul 14, 2021
CVSS 7.1
EPSS 0.00
CVE-2021-22769 MEDIUM
Easergy T300 <V2.7.1 - Info Disclosure
Jun 11, 2021
CVSS 4.3
EPSS 0.00
CVE-2021-22768 CRITICAL
PowerLogic EGX100 >=3.0.0 and EGX300 - Denial of Service or Remote Code Execution via HTTP Packet
Jun 11, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-22767 CRITICAL
PowerLogic EGX100 >= 3.0.0 and EGX300 - Denial of Service or Remote Code Execution via HTTP Packet
Jun 11, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-22766 HIGH
PowerLogic EGX100 >=3.0.0 and EGX300 - Denial of Service via Crafted HTTP Packet
Jun 11, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-22765 CRITICAL
PowerLogic EGX100 >=3.0.0 and EGX300 - Denial of Service or Remote Code Execution via HTTP Packet
Jun 11, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-22764 MEDIUM
PowerLogic - Improper Authentication
Jun 11, 2021
CVSS 5.3
EPSS 0.00