Skip to main content

Power Manager

7 CVEs product

Monthly

CVE-2024-49600 Dec 09, 15:15 HIGH This Week

Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass RCE Dell Power Manager
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-39576 Aug 22, 03:15 HIGH This Week

Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Dell Power Manager
NVD
CVSS 3.1
8.8
EPSS
0.2%
CVE-2023-32450 Jul 27, 05:15 HIGH This Week

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Dell Power Manager
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28051 Apr 07, 08:15 HIGH This Week

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Dell Power Manager
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2020-7547 Dec 01, 15:15 HIGH This Week

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Power Manager Ecostruxure Power Monitoring Expert Ecostruxure Energy Expert +2
NVD
CVSS 3.1
8.8
EPSS
1.3%
CVE-2020-7546 Dec 01, 15:15 MEDIUM This Month

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Schneider Electric Power Manager Ecostruxure Power Monitoring Expert Ecostruxure Energy Expert +2
NVD
CVSS 3.1
5.4
EPSS
0.6%
CVE-2020-7545 Dec 01, 15:15 HIGH This Week

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass RCE Schneider Electric Power Manager Ecostruxure Power Monitoring Expert +3
NVD
CVSS 3.1
7.2
EPSS
2.0%
EPSS 0% CVSS 7.8
HIGH This Week

Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass RCE Dell +1
NVD
EPSS 0% CVSS 8.8
HIGH This Week

Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Dell Power Manager
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Dell Power Manager
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Dell Power Manager
NVD
EPSS 1% CVSS 8.8
HIGH This Week

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Power Manager +4
NVD
EPSS 1% CVSS 5.4
MEDIUM This Month

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Schneider Electric Power Manager +4
NVD
EPSS 2% CVSS 7.2
HIGH This Week

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass RCE Schneider Electric +5
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy