Ecostruxure It Gateway

ecostruxure_it_gateway

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-10575 1Schneider Electric 1Ecostruxure It Gateway Jun 17, 2026 Nov 13, 2024 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices.
CVE-2024-0865 1Schneider Electric 1Ecostruxure It Gateway Jun 17, 2026 Jun 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user.
CVE-2020-10626 2Fazecast Schneider Electric 2Ecostruxure It Gateway Jserialcomm Jun 17, 2026 May 14, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arb...Show more In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.Show less