https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:56:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02949 bdu:2024-02949 https://cve.radiocsirt.org/vuln/bdu:2024-02949 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0120 certfr-2024-avi-0120 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0120 https://cve.radiocsirt.org/vuln/euvd-2026-238835 EUVD-2026-238835 https://cve.radiocsirt.org/vuln/euvd-2026-238835 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6409 <p>CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.</p> <p>CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6409 https://cve.radiocsirt.org/vuln/ghsa-57mc-gf87-2j5v <p>CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.</p> <p>CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.</p> https://cve.radiocsirt.org/vuln/ghsa-57mc-gf87-2j5v https://cve.radiocsirt.org/vuln/gsd-2023-6409 gsd-2023-6409 https://cve.radiocsirt.org/vuln/gsd-2023-6409 https://cve.radiocsirt.org/vuln/icsa-24-331-03 <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Control Expert , EcoStruxure Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure Control Expert is the common programming, debugging and operating software for Modicon PLCs. EcoStruxure Process Expert DCS is a single automation system to engineer, operate, and maintain an entire plant Infrastructure. Failure to apply the remediations provided below may risk unauthorized access to your PLC, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller. Note regarding vulnerability details: The severity of vulnerabilities was calculated using the CVSS Base metrics in version 3.1 (CVSS v3.1) without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer’s environment</p> <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Control Expert , EcoStruxure Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure Control Expert is the common programming, debugging and operating software for Modicon PLCs. EcoStruxure Process Expert DCS is a single automation system to engineer, operate, and maintain an entire plant Infrastructure. Failure to apply the remediations provided below may risk unauthorized access to your PLC, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller. Note regarding vulnerability details: The severity of vulnerabilities was calculated using the CVSS Base metrics in version 3.1 (CVSS v3.1) without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer’s environment</p> https://cve.radiocsirt.org/vuln/icsa-24-331-03 https://cve.radiocsirt.org/vuln/sevd-2024-044-01 <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon PLCs. EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain an entire plant Infrastructure. Failure to apply the remediations provided below may risk unauthorized access to your PLC, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller. Note regarding vulnerability details: The severity of vulnerabilities was calculated using the CVSS Base metrics in version 3.1 (CVSS v3.1) without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer’s environment</p> <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon PLCs. EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain an entire plant Infrastructure. Failure to apply the remediations provided below may risk unauthorized access to your PLC, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller. Note regarding vulnerability details: The severity of vulnerabilities was calculated using the CVSS Base metrics in version 3.1 (CVSS v3.1) without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer’s environment</p> https://cve.radiocsirt.org/vuln/sevd-2024-044-01