CVE-2024-8401: falha de média gravidade em Schneider Electric EcoStruxure Power…
Publicada em
Seguir esta CVE+ Monitorar EcoStruxure Power Monitoring Expert+ Monitorar EcoStruxure Power Operation
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.3%
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
vulnerability exists when an authenticated attacker modifies folder names within the context of
the product.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Schneider Electric · EcoStruxure Power Monitoring Expert (PME) 2020Schneider Electric · EcoStruxure Power Monitoring Expert (PME) 2021Schneider Electric · EcoStruxure Power Operation (EPO) 2021Schneider Electric · EcoStruxure Power Operation (EPO) 2021 – Advanced Reporting and Dashboards ModuleSchneider Electric · EcoStruxure Power Operation (EPO) 2022Schneider Electric · EcoStruxure Power Operation (EPO) 2022 – Advanced Reporting and Dashboards ModuleSchneider Electric · EcoStruxure Power SCADA Operation 2020 (PSO) - Advanced Reporting and Dashboards Module