CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-27975

CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.2%

CVSS Severity

CVSS v3 Score 7.1

References

Products affected by CVE-2023-27975

Schneider-Electric » Ecostruxure Control Expert » Version: N/A

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:-
Schneider-Electric » Ecostruxure Control Expert » Version: 14.0

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:14.0
Schneider-Electric » Ecostruxure Control Expert » Version: 14.1

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:14.1
Schneider-Electric » Ecostruxure Control Expert » Version: 15.0

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.0
Schneider-Electric » Ecostruxure Control Expert » Version: 15.1

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.1
Schneider-Electric » Ecostruxure Control Expert » Version: 15.2

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.2
Schneider-Electric » Ecostruxure Control Expert » Version: 15.3

cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.3
Schneider-Electric » Ecostruxure Process Expert » Version: N/A

cpe:2.3:a:schneider-electric:ecostruxure_process_expert:-
Schneider-Electric » Ecostruxure Process Expert » Version: 2020

cpe:2.3:a:schneider-electric:ecostruxure_process_expert:2020
Schneider-Electric » Ecostruxure Process Expert » Version: 2021

cpe:2.3:a:schneider-electric:ecostruxure_process_expert:2021

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-27975

Products

Pricing

Contact Us