{"api_version":"v1","generated_at":"2026-10-09T16:45:00+00:00","product":{"cve_count":10,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-schneider-electric-ecostruxure-control-expert-284cf71fc9f9","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"EcoStruxure Control Expert","next_cursor":null,"observations":[{"affected":"Versions prior to v16.0; Versions prior to v2023","affected_versions_present":true,"cve_id":"CVE-2023-27975","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-27975","fixed":"SV3.60 of Modicon M340 firmware includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/1468- modicon-m340","last_modified":"2024-08-02T12:23:30.803Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf","primary_source":"","published":"2024-02-14T16:55:41.495Z"},{"affected":"Versions prior to v16.0; Versions prior to v2023","affected_versions_present":true,"cve_id":"CVE-2023-6409","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-6409","fixed":"SV3.60 of Modicon M340 firmware includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/1468- modicon-m340","last_modified":"2025-05-12T14:07:03.007Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf","primary_source":"","published":"2024-02-14T16:47:05.519Z"},{"affected":"V15.1 and above","affected_versions_present":true,"cve_id":"CVE-2023-1548","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-1548","fixed":"Version 16.0 of EcoStruxure Control Expert includes fixes for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/548-ecostruxure-controlexpert- unity-pro/#software-and-firmware","last_modified":"2025-02-05T21:14:31.860Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf","primary_source":"","published":"2023-04-18T16:42:18.451Z"},{"affected":"V15.1 and above","affected_versions_present":true,"cve_id":"CVE-2023-27976","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-27976","fixed":"Version 16.0 of EcoStruxure Control Expert includes fixes for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/548-ecostruxure-controlexpert- unity-pro/#software-and-firmware","last_modified":"2025-02-05T21:02:29.013Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf","primary_source":"","published":"2023-04-18T16:39:35.385Z"},{"affected":"All Versions","affected_versions_present":true,"cve_id":"CVE-2022-45789","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-45789","fixed":"Firmware SV4.20 includes a fix for this vulnerability and is available for download here:https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware","last_modified":"2026-05-29T14:09:29.675Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-06_Modicon_Controllers_Security_Notification.pdf","primary_source":"","published":"2023-01-31T00:00:00.000Z"},{"affected":"All Versions","affected_versions_present":true,"cve_id":"CVE-2022-45788","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-45788","fixed":"Software V15.3 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureControlExpert-V15.3/","last_modified":"2026-05-29T14:08:52.615Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-05_Modicon_Controllers_Security_Notification.pdf","primary_source":"","published":"2023-01-30T00:00:00.000Z"},{"affected":"HF001 \u2264 15.1","affected_versions_present":true,"cve_id":"CVE-2022-37302","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-37302","fixed":"V15.2 of EcoStruxure\u2122 Control Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureControlExpert_V15.2/","last_modified":"2024-08-03T10:29:20.575Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-221-03_EcoStruxure_Control_Expert_Security_Notification.pdf","primary_source":"","published":"2022-09-13T09:35:12.000Z"},{"affected":"SP1 \u2264 15.0; V \u2264 2021; BMXP34 \u2264 3.40; BMEP \u2264 3.20; BMEH \u2264 3.20","affected_versions_present":true,"cve_id":"CVE-2022-37300","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-37300","fixed":"EcoStruxure Control Expert V15.1, available for download below, includes a fix for this vulnerability https://www.se.com/ww/en/download/document/EcoStruxureControlExpert_V15.1/","last_modified":"2024-08-03T10:29:20.628Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-221-01_EcoStruxure_Control_Expert_Modicon580_Security_Notification.pdf","primary_source":"","published":"2022-09-12T17:40:10.000Z"},{"affected":"unspecified < V15.0 SP1; unspecified < 2020; All versions","affected_versions_present":true,"cve_id":"CVE-2021-22797","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-22797","fixed":"V15.1 and prior of EcoStruxure\u2122 Control Expert includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureControlExpert_V15.1/","last_modified":"2024-08-03T18:51:07.527Z","patch_url":"https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-257-01_EcoStruxure_Control_Expert_EcoStruxure_Process_Expert_SCADAPack_Security_Notification_V3.0.pdf&p_Doc_Ref=SEVD-2021-257-01","primary_source":"","published":"2022-03-28T16:25:24.000Z"},{"affected":"V15.0 SP1 and prior","affected_versions_present":true,"cve_id":"CVE-2022-24322","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24322","fixed":"Version 15.1 of EcoStruxure\u2122 Control Expert includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureControlExpert_V15.1/ Customers using Unity Pro should strongly consider migrating to EcoStruxure\u2122 Control Expert. If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: To mitigate the risks associated to Modbus weaknesses, users should immediately: \u2022 Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP","last_modified":"2024-08-03T04:07:02.429Z","patch_url":"https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-067-01_EcoStruxure_Control_Expert_and_EcoStruxure_Process_Expert_Security_Notification_V2.0.pdf","primary_source":"","published":"2022-03-09T23:05:13.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Schneider Electric"}}