Schneider Electric Ecostruxure Energy Expert vulnerabilities

4 CVEs affecting Schneider Electric Ecostruxure Energy Expert, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7547, published 2020-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7545, published 2020-12-01. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for…
CVE-2020-7547, published 2020-12-01. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a…
CVE-2018-7797, published 2018-12-17. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert…
CVE-2020-7546, published 2020-12-01. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for…