Ecostruxure Control Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Ecostruxure Control Expert (1254513b-0e1a-5402-9403-e347863902a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6409 |
vulnerable | 2026-06-08 06:19:47.341719 |
Details available
HIGH (7.7)
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.
Published: 2024-02-14T16:47:05.519Z
Updated: 2025-05-12T14:07:03.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6408 |
vulnerable | 2026-06-08 06:19:47.269907 |
Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication Channel vulnerability exists that could cause a denial of service and loss of
confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27976 |
vulnerable | 2026-06-08 05:57:42.655469 |
Details available
HIGH (8.8)
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause
remote code execution when a valid user visits a malicious link provided through the web
endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)
Published: 2023-04-18T16:39:35.385Z
Updated: 2025-02-05T21:02:29.013Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27975 |
vulnerable | 2026-06-08 05:57:42.652867 |
Details available
HIGH (7.1)
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized
access to the project file in EcoStruxure Control Expert when a local user tampers with the
memory of the engineering workstation.
Published: 2024-02-14T16:55:41.495Z
Updated: 2024-08-02T12:23:30.803Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1548 |
vulnerable | 2026-06-08 05:52:36.095992 |
Details available
MEDIUM (5.5)
A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to
perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)
Published: 2023-04-18T16:42:18.451Z
Updated: 2025-02-05T21:14:31.860Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45789 |
vulnerable | 2026-06-08 05:50:36.783600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45788 |
vulnerable | 2026-06-08 05:50:36.684802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37302 |
vulnerable | 2026-06-08 05:47:11.974412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37300 |
vulnerable | 2026-06-08 05:47:11.835302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24323 |
vulnerable | 2026-06-08 05:41:00.151674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24322 |
vulnerable | 2026-06-08 05:41:00.147572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22797 |
vulnerable | 2026-06-08 05:30:01.454170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.