Schneider Electric Iiot Monitor vulnerabilities

2 CVEs affecting Schneider Electric Iiot Monitor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7839, published 2019-02-06.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7836, published 2018-12-24. Critical severity, CVSS 9.8. EPSS: 32% chance of exploitation in the next 30 days. An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files.
• CVE-2018-7839, published 2019-02-06. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure.