Schneider Electric Proface Gp-Pro Ex Pfxexgrpls vulnerabilities

4 CVEs affecting Schneider Electric Proface Gp-Pro Ex Pfxexgrpls, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-2292, published 2016-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2290, published 2016-04-06. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute…
CVE-2016-2292, published 2016-04-06. Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute…
CVE-2016-2291, published 2016-04-06. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of…
CVE-2015-7921, published 2016-04-06. Critical severity, CVSS 9.1. EPSS: 2% chance of exploitation in the next 30 days. The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for…