https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:50:41.023883+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-705 certfr-2021-avi-705 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un at… 2026-10-03T01:50:41.128763+00:00 certfr-2021-avi-705 https://cve.radiocsirt.org/vuln/euvd-2026-23170 EUVD-2026-23170 2026-10-03T01:50:41.128865+00:00 EUVD-2026-23170 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22797 fkie_cve-2021-22797 2026-10-03T01:50:41.128898+00:00

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x70 (All versions)

 https://cve.radiocsirt.org/vuln/ghsa-qqgr-6jmg-cwgv GHSA-qqgr-6jmg-cwgv 2026-10-03T01:50:41.128960+00:00

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x70 (All versions)

 https://cve.radiocsirt.org/vuln/gsd-2021-22797 gsd-2021-22797 2026-10-03T01:50:41.129003+00:00 gsd-2021-22797 https://cve.radiocsirt.org/vuln/icsa-21-259-02 ICSA-21-259-02 — Schneider Electric EcoStruxure and SCADAPack 2026-10-03T01:50:41.129029+00:00

When a malicious project file is loaded on the engineering workstation software, it deploys a malicious script to execute arbitrary code in unauthorized locations.CVE-2021-22797has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/sevd-2021-257-01 SEVD-2021-257-01 — EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 2026-10-03T01:50:41.129072+00:00

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ for x70 software products. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon M340, M580, M580S, Premium, Momentum and Quantum ranges. EcoStruxure™ Process Expert is the next-generation process automation system to engineer, operate and maintain an entire plant, a Distributed Control System (DCS), designed especially for water, mining, cement, power generation, consumer packaged goods, chemical, and oil and gas applications. The SCADAPack RemoteConnect™ for x70 product is a Windows-based application based on EcoStruxure™ Control Expert software components that provides a programming and configuration environment for the SCADAPack x70 RTU series, which is comprised of the SCADAPack 470, 474, 570, 574 and 575 Smart RTUs. Failure to apply the remediations provided below may risk a Denial of Service attack, which could cause a disruption of communication between the Modicon controller and the engineering software. June 2022 Update: Added SCADAPack RemoteConnect™ to the list of affected products, which is impacted on versions prior to R2.7.3 through the integration of EcoStruxure™ Control Expert.