Vulnerabilities (CVE)

Filtered by vendor Se Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-37200 1 Se 1 Ecostruxure Opc Ua Server Expert 2023-12-10 N/A 5.5 MEDIUM
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.
CVE-2020-7496 1 Se 1 Ecostruxure Operator Terminal Expert 2023-12-10 6.8 MEDIUM 7.8 HIGH
A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening the project file.