Schneider Electric EcoStruxure Power Operation (Update A)
Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-28219US | medium5.9 | — | ||
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. | ||||
| CVE-2023-50447US | high8.1 | — | ||
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expressio… | ||||
| CVE-2023-44487US | high7.5OT kritisch | KEV | ||
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through… | ||||
| CVE-2023-5217US | high8.8OT kritisch | KEV | ||
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a cra… | ||||
| CVE-2023-35945US | high7.5 | — | ||
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately fo… | ||||
| CVE-2022-45198US | high7.5 | — | ||
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-203-04 JSONself
- ICSA Advisory ICSA-25-203-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2022
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
- MitigationEcoStruxure Power Operation (EPO) 2024
If users choose not to apply the remediation mentioned above, Schneider Electric recommends the following:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan