Schneider Electric EcoStruxure Power Operation (Update A)
Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-28219US | medium5.9 | — | ||
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. | ||||
| CVE-2023-50447US | high8.1 | — | ||
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expressio… | ||||
| CVE-2023-44487US | high7.5OT critical | KEV | ||
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through… | ||||
| CVE-2023-5217US | high8.8OT critical | KEV | ||
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a cra… | ||||
| CVE-2023-35945US | high7.5 | — | ||
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately fo… | ||||
| CVE-2022-45198US | high7.5 | — | ||
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-203-04 JSONself
- ICSA Advisory ICSA-25-203-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan