Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductEcostruxure Control Expert (e97ef60d-a36e-52df-8094-5ad5d47f5fb4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6409 vulnerable 2026-06-08 06:19:47.341914 Details available
HIGH (7.7)
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.
Published: 2024-02-14T16:47:05.519Z
Updated: 2025-05-12T14:07:03.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6408 vulnerable 2026-06-08 06:19:47.340329 Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27976 vulnerable 2026-06-08 05:57:42.655509 Details available
HIGH (8.8)
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)
Published: 2023-04-18T16:39:35.385Z
Updated: 2025-02-05T21:02:29.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27975 vulnerable 2026-06-08 05:57:42.654203 Details available
HIGH (7.1)
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation.
Published: 2024-02-14T16:55:41.495Z
Updated: 2024-08-02T12:23:30.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1548 vulnerable 2026-06-08 05:52:36.097262 Details available
MEDIUM (5.5)
A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)
Published: 2023-04-18T16:42:18.451Z
Updated: 2025-02-05T21:14:31.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45789 vulnerable 2026-06-08 05:50:36.783936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45788 vulnerable 2026-06-08 05:50:36.693220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37302 vulnerable 2026-06-08 05:47:11.974550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37300 vulnerable 2026-06-08 05:47:11.838602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26507 vulnerable 2026-06-08 05:41:52.299067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24323 vulnerable 2026-06-08 05:41:00.151702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24322 vulnerable 2026-06-08 05:41:00.148684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22797 vulnerable 2026-06-08 05:30:01.455549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22782 vulnerable 2026-06-08 05:30:01.350531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22781 vulnerable 2026-06-08 05:30:01.350164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22780 vulnerable 2026-06-08 05:30:01.349642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22779 vulnerable 2026-06-08 05:30:01.300187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22778 vulnerable 2026-06-08 05:30:01.296496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7560 vulnerable 2026-06-08 05:27:13.545903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7559 vulnerable 2026-06-08 05:27:13.543142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7538 vulnerable 2026-06-08 05:27:13.464771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7475 vulnerable 2026-06-08 05:27:13.166787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28213 vulnerable 2026-06-08 05:23:53.867367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28212 vulnerable 2026-06-08 05:23:53.867032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28211 vulnerable 2026-06-08 05:23:53.866623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6855 vulnerable 2026-06-08 05:14:13.436110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.