xylem
Security Risk Profile
70
/100
highSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 8, 2021 to present
7
Total CVEs
5
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
8.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
70/100
high
Severity Distribution
Critical
4High
1Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
2
SQL Injection
1
Most Affected Products
1. Schneider-electric Pacis Gtw Firmware Windows20
2. Rockwell Automation AADvance Controller version 1.40 and earlier5
3. Rockwell Automation ISaGRAF Free Runtime in ISaGRAF6 Workbench Version 6.6.8 and earlier5
4. Rockwell Automation Micro800 family, all versions5
5. Schneider-electric Easergy T300 Firmware5
Recent Vulnerabilities
See more →CVE-2020-25180
CVSS 6.5medium
Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key
3/18/2022
CVE-2020-25184
CVSS 7.8high
Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials
3/18/2022
CVE-2020-25176
CVSS 9.8critical
Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal
3/18/2022
CVE-2020-25182
CVSS 6.7medium
Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element
3/18/2022
CVE-2020-25178
CVSS 9.3critical
Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information
3/18/2022
CVE-2021-42833
CVSS 9.3critical
Use of hardcoded credentials impacting AquaView versions 1.60, 7.x, 8.x
2/7/2022
CVE-2021-41063
CVSS 9.8critical
12/8/2021
Monitor xylem in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.