Vulnerabilities (CVE)

Filtered by vendor Schneider-electric Subscribe
Filtered by product Ecostruxure It Gateway
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10626 2 Fazecast, Schneider-electric 2 Jserialcomm, Ecostruxure It Gateway 2024-11-21 6.9 MEDIUM 7.8 HIGH
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.
CVE-2024-10575 1 Schneider-electric 1 Ecostruxure It Gateway 2024-11-19 N/A 9.8 CRITICAL
CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices.
CVE-2024-0865 1 Schneider-electric 1 Ecostruxure It Gateway 2024-07-19 N/A 7.8 HIGH
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user.