Ecostruxure Process Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Ecostruxure Process Expert (ff835f26-bf32-5ae6-9c5d-96f5d210222d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6409 |
vulnerable | 2026-06-08 06:19:47.341941 |
Details available
HIGH (7.7)
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.
Published: 2024-02-14T16:47:05.519Z
Updated: 2025-05-12T14:07:03.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6408 |
vulnerable | 2026-06-08 06:19:47.341173 |
Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication Channel vulnerability exists that could cause a denial of service and loss of
confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27975 |
vulnerable | 2026-06-08 05:57:42.655042 |
Details available
HIGH (7.1)
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized
access to the project file in EcoStruxure Control Expert when a local user tampers with the
memory of the engineering workstation.
Published: 2024-02-14T16:55:41.495Z
Updated: 2024-08-02T12:23:30.803Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45789 |
vulnerable | 2026-06-08 05:50:36.783957 |
Details available
HIGH (8.1)
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
Published: 2023-01-31T00:00:00.000Z
Updated: 2026-05-29T14:09:29.675Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45788 |
vulnerable | 2026-06-08 05:50:36.694077 |
Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2026-05-29T14:08:52.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37300 |
vulnerable | 2026-06-08 05:47:11.839637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26507 |
vulnerable | 2026-06-08 05:41:52.300419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24323 |
vulnerable | 2026-06-08 05:41:00.153059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22797 |
vulnerable | 2026-06-08 05:30:01.455577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22782 |
vulnerable | 2026-06-08 05:30:01.350569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22781 |
vulnerable | 2026-06-08 05:30:01.350204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22780 |
vulnerable | 2026-06-08 05:30:01.349688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22779 |
vulnerable | 2026-06-08 05:30:01.301104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22778 |
vulnerable | 2026-06-08 05:30:01.297869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.