Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:sp1:*:*:*:*:*:*

part: a version: 3.3 update: sp1

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductEcostruxure Operator Terminal Expert (0c0959e4-ff06-59f0-808c-5839368d2a65)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1049 vulnerable 2026-06-08 05:52:33.706626 Details available
HIGH (7.8)
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.
Published: 2023-06-14T07:27:59.794Z
Updated: 2025-01-02T20:43:15.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.