Schneider Electric Custom Reports (RMS16.dll)
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-27984 | V – 16.0.0.23040 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to r | HIGH 8.8 | 0.6 % | ||
| CVE-2023-27983 | V – 16.0.0.23040 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of r | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-27982 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard | HIGH 8.8 | 0.4 % | ||
| CVE-2023-27981 | V – 16.0.0.23040 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code | HIGH 8.8 | 0.7 % | ||
| CVE-2023-27980 | V – 16.0.0.23040 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation | HIGH 8.8 | 0.9 % | ||
| CVE-2023-27979 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-27978 | V – 16.0.0.23040 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious pa | HIGH 7.8 | 6.5 % | ||
| CVE-2023-27977 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in | MEDIUM 6.5 | 0.2 % |