Ecostruxure Process Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Ecostruxure Process Expert (69744e26-c97f-586b-90f3-fe878f4d0967) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0327 |
vulnerable | 2026-06-08 07:02:24.365297 |
Details available
HIGH (7.8)
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit
trail data and the other acting as server managing client request) that could cause a loss of Confidentiality,
Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the
executable path of the windows services. To be exploited, services need to be restarted.
Published: 2025-02-13T06:20:26.852Z
Updated: 2025-02-13T14:56:12.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6409 |
vulnerable | 2026-06-08 06:19:47.341763 |
Details available
HIGH (7.7)
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.
Published: 2024-02-14T16:47:05.519Z
Updated: 2025-05-12T14:07:03.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6408 |
vulnerable | 2026-06-08 06:19:47.270428 |
Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication Channel vulnerability exists that could cause a denial of service and loss of
confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27975 |
vulnerable | 2026-06-08 05:57:42.653483 |
Details available
HIGH (7.1)
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized
access to the project file in EcoStruxure Control Expert when a local user tampers with the
memory of the engineering workstation.
Published: 2024-02-14T16:55:41.495Z
Updated: 2024-08-02T12:23:30.803Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45789 |
vulnerable | 2026-06-08 05:50:36.783645 |
Details available
HIGH (8.1)
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
Published: 2023-01-31T00:00:00.000Z
Updated: 2026-05-29T14:09:29.675Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45788 |
vulnerable | 2026-06-08 05:50:36.685625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37300 |
vulnerable | 2026-06-08 05:47:11.836101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24323 |
vulnerable | 2026-06-08 05:41:00.151619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22797 |
vulnerable | 2026-06-08 05:30:01.454694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.