Schneider Electric Iiot Monior vulnerabilities

2 CVEs affecting Schneider Electric Iiot Monior, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7837, published 2018-12-24.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7835, published 2018-12-24. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user.
• CVE-2018-7837, published 2018-12-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents…