Schneider Electric Andover Continuum 9900 Firmware vulnerabilities

4 CVEs affecting Schneider Electric Andover Continuum 9900 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7482, published 2020-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7480, published 2020-03-23. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be…
CVE-2020-7482, published 2020-03-23. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could cause a Reflective Cross-site…
CVE-2020-7481, published 2020-03-23. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could enable a successful Cross-site…
CVE-2019-6853, published 2019-11-20. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful…