Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:basic:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductVijeo Designer (d440781c-59ac-5543-a62b-f0b2bbe1189e)
Edition*
Language*
Software editionbasic
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22817 vulnerable 2026-06-08 05:30:01.606218 Details available
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
Published: 2022-02-09T22:05:12.000Z
Updated: 2024-08-03T18:51:07.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22704 vulnerable 2026-06-08 05:30:01.126603 Details available
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP.
Published: 2021-09-02T16:53:31.000Z
Updated: 2024-08-03T18:51:07.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7501 vulnerable 2026-06-08 05:27:13.340106 Details available
A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer.
Published: 2020-06-16T19:40:23.000Z
Updated: 2024-08-04T09:33:19.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7490 vulnerable 2026-06-08 05:27:13.298710 Details available
A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.
Published: 2020-04-22T18:48:47.000Z
Updated: 2024-08-04T09:33:19.453Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.