X80 Advanced Rtu Module Firmware (Schneider-electric) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-07-13. Vendor: Schneider-electric.

CVEs of X80 Advanced Rtu Module Firmware

• CVE-2022-34761 - CVSS 7.5 (high), 2022-07-13: A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected…
• CVE-2022-34764 - CVSS 7.5 (high), 2022-07-13: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service when parsing the…
• CVE-2022-34760 - CVSS 7.5 (high), 2022-07-13: A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserver due to improper…
• CVE-2022-34763 - CVSS 7.5 (high), 2022-07-13: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due to improper…
• CVE-2022-34759 - CVSS 7.5 (high), 2022-07-13: A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers.…
• CVE-2022-34762 - CVSS 7.5 (high), 2022-07-13: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image…
• CVE-2022-34765 - CVSS 5.5 (medium), 2022-07-13: A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is…