Advisories · Technology

Schneider Electric EcoStruxure Operator Terminal Expert.

Every CVE that names Schneider Electric EcoStruxure Operator Terminal Expert among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-41671 CVE record

CVSS 7.0 High

SQL injection in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- SQL injection
Not analysed yet 4 Nov 2022
CVE-2022-41670 CVE record

CVSS 7.0 High

Path traversal in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- Path traversal
Not analysed yet 4 Nov 2022
CVE-2022-41669 CVE record

CVSS 7.0 High

Improper signature verification in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- Weak cryptography or TLS
Not analysed yet 4 Nov 2022
CVE-2022-41668 CVE record

CVSS 7.0 High

Incorrect type conversion in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- CWE-704
Not analysed yet 4 Nov 2022
CVE-2022-41667 CVE record

CVSS 7.0 High

Path traversal in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- Path traversal
Not analysed yet 4 Nov 2022
CVE-2022-41666 CVE record

CVSS 7.0 High

Improper signature verification in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- Weak cryptography or TLS
Not analysed yet 4 Nov 2022