Ecostruxure Operator Terminal Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:ecostruxure_operator_terminal_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Ecostruxure Operator Terminal Expert (1cb8bde3-4238-58e0-94f4-bc826543117c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41671 |
vulnerable | 2026-06-08 05:48:30.756810 |
Details available
HIGH (7)
A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Published: 2022-11-04T00:00:00.000Z
Updated: 2025-05-01T19:03:13.270Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41670 |
vulnerable | 2026-06-08 05:48:30.755941 |
Details available
HIGH (7)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Published: 2022-11-04T00:00:00.000Z
Updated: 2025-04-30T20:10:42.160Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41669 |
vulnerable | 2026-06-08 05:48:30.752047 |
Details available
HIGH (7)
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Published: 2022-11-04T00:00:00.000Z
Updated: 2025-05-02T18:28:02.037Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41668 |
vulnerable | 2026-06-08 05:48:30.751513 |
Details available
HIGH (7)
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Published: 2022-11-04T00:00:00.000Z
Updated: 2025-05-02T18:27:23.419Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41667 |
vulnerable | 2026-06-08 05:48:30.747125 |
Details available
HIGH (7)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Published: 2022-11-04T00:00:00.000Z
Updated: 2025-05-02T18:26:43.222Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41666 |
vulnerable | 2026-06-08 05:48:30.742678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.