Somachine Basic (Schneider-electric) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2020-04-22. Vendor: Schneider-electric.

CVEs of Somachine Basic

• CVE-2020-7489 - CVSS 9.8 (critical), 2020-04-22: A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine…
• CVE-2018-7823 - CVSS 5.3 (medium), 2019-05-22: A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which…
• CVE-2018-7822 - CVSS 5.5 (medium), 2019-05-22: An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to…
• CVE-2018-7821 - CVSS 7.5 (high), 2019-05-22: An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which…
• CVE-2018-7798 - CVSS 8.2 (high), 2018-11-02: A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4…
• CVE-2018-7783 - CVSS 7.5 (high), 2018-07-03: Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique…