Ecostruxure Machine Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:ecostruxure_machine_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Ecostruxure Machine Expert (a49f59e1-54ac-5d11-af16-6fb062b0df11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-22705 |
vulnerable | 2026-06-08 05:30:01.130921 |
Details available
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert
Published: 2021-05-26T19:19:18.000Z
Updated: 2024-08-03T18:51:07.333Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22704 |
vulnerable | 2026-06-08 05:30:01.128249 |
Details available
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP.
Published: 2021-09-02T16:53:31.000Z
Updated: 2024-08-03T18:51:07.445Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7489 |
vulnerable | 2026-06-08 05:27:13.287730 |
Details available
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.
Published: 2020-04-22T18:15:57.000Z
Updated: 2026-05-28T20:30:39.144Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7488 |
vulnerable | 2026-06-08 05:27:13.284452 |
Details available
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
Published: 2020-04-22T18:51:26.000Z
Updated: 2026-05-28T20:29:31.517Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7487 |
vulnerable | 2026-06-08 05:27:13.275398 |
Details available
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
Published: 2020-04-22T18:50:25.000Z
Updated: 2024-08-04T09:33:18.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.