Vulnerabilities (CVE)

Filtered by vendor Schneider-electric Subscribe
Filtered by product Harmony Scu
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-22704 1 Schneider-electric 10 Ecostruxure Machine Expert, Harmony Gk, Harmony Gto and 7 more 2024-02-28 6.4 MEDIUM 9.1 CRITICAL
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP.