Easergy Studio (Schneider-electric) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-10-11. Vendor: Schneider-electric.

CVEs of Easergy Studio

• CVE-2024-9002 - CVSS 7.8 (high), 2024-10-11: CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the…
• CVE-2024-2747 - CVSS 7.8 (high), 2024-06-12: CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted…
• CVE-2023-7032 - CVSS 7.8 (high), 2024-01-09: A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges…