CVE-2023-6409

概要

参考情報

• download.schneider-electric.com/files · Vendor Advisory

ecostruxure control expert のその他の脆弱性

• CVE-2023-6408高 8.1 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a d…
• CVE-2023-27975高 7.1 CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure …
• CVE-2023-27976高 8.8 A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a mali…
• CVE-2023-1548中 5.5 A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the cons…
• CVE-2022-37302中 5.5A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Cont…