EcoStruxure Process Expert: All versions (including former HDCS) prior to V2021

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

9critical4high0medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-21829US	critical9.8	2.54% (85th)	—	no fix	2021-08-13	—
CVE-2022-26507US	critical9.8	2.42% (84th)	—	no fix	2022-04-14	—
CVE-2021-21825US	critical9.8	2.27% (83rd)	—	no fix	2021-08-18	—
CVE-2021-21830US	critical9.8	2.27% (83rd)	—	no fix	2021-08-13	—
CVE-2021-21811US	critical9.8	1.14% (66th)	—	no fix	2021-08-31	—
CVE-2021-21828US	critical9.8	1.14% (66th)	—	no fix	2021-08-20	—
CVE-2021-21827US	critical9.8	1.14% (66th)	—	no fix	2021-08-20	—
CVE-2021-21826US	critical9.8	1.14% (66th)	—	no fix	2021-08-20	—
CVE-2021-21810US	critical9.8	1.14% (66th)	—	no fix	2021-08-17	—
CVE-2021-21814US	high7.8	0.34% (28th)	—	no fix	2021-08-13	—
CVE-2021-21815US	high7.8	0.33% (26th)	—	no fix	2021-08-13	—
CVE-2021-21813US	high7.8	0.33% (26th)	—	no fix	2021-08-13	—
CVE-2021-21812US	high7.8	0.33% (26th)	—	no fix	2021-08-13	—

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write11 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.