Filtered by vendor Schneider-electric Subscriptions
Filtered by product Harmony Sto Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-22704 1 Schneider-electric 10 Ecostruxure Machine Expert, Harmony Gk, Harmony Gto and 7 more 2024-08-03 9.1 Critical
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP.
CVE-2021-22705 1 Schneider-electric 9 Ecostruxure Machine Expert, Harmony Gk, Harmony Gto and 6 more 2024-08-03 7.8 High
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert