Schneider Electric Power Manager vulnerabilities

3 CVEs affecting Schneider Electric Power Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7547, published 2020-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7545, published 2020-12-01. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for…
CVE-2020-7547, published 2020-12-01. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a…
CVE-2020-7546, published 2020-12-01. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for…