Advisories · Technology
Schneider Electric EcoStruxure™ IT Data Center Expert.
Every CVE that names Schneider Electric EcoStruxure™ IT Data Center Expert among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
XML external entity injection in Schneider Electric EcoStruxure™ IT Data Center Expert
- Schneider Electric EcoStruxure™ IT Data Center Expert
- XML external entities (XXE)
- CVSS 7.2 High
Improper privilege management in Schneider Electric EcoStruxure™ IT Data Center Expert
- Schneider Electric EcoStruxure™ IT Data Center Expert
- Privilege escalation
- CVSS 6.3 Medium
Server-side request forgery in Schneider Electric EcoStruxure™ IT Data Center Expert
- Schneider Electric EcoStruxure™ IT Data Center Expert
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Code injection in Schneider Electric EcoStruxure™ IT Data Center Expert
- Schneider Electric EcoStruxure™ IT Data Center Expert
- Code injection
- CVSS 8.9 High
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artif…
- Schneider Electric EcoStruxure™ IT Data Center Expert
- CWE-331
- CVSS 9.5 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
OS command injection in Schneider Electric EcoStruxure™ IT Data Center Expert
- Schneider Electric EcoStruxure™ IT Data Center Expert
- Command injection
- CVSS 5.9 Medium
XML external entity injection in Schneider Electric EcoStruxure™ IT Data Center Expert
- Schneider Electric EcoStruxure™ IT Data Center Expert
- XML external entities (XXE)