Schneider Electric vulnerabilities

Products

• Struxureware Data Center Expert 15
• Ecostruxure Control Expert 12
• Modicon M340 Cpu (part Numbers Bmxp34*) 12
• Powerchute™ Serial Shutdown 11
• Igss Data Server (igssdataserver.exe) 10
• Ecostruxure Process Expert 9
• Igss Dashboard (dashboard.exe) 9
• Custom Reports (rms16.dll) 8
• Igss Data Server(igssdataserver.exe) 8
• Clearscada 7
• Ecostruxure™ It Data Center Expert 7
• Modicon Controllers M241/m251 7
• Modicon M580 Cpu Safety (part Numbers Bmep58*s And Bmeh58*s) 7
• Modicon Momentum Unity M1e Processor (171cbu*) 7
• Opc Ua Modicon Communication Module 7
• Pro-face Blue 7
• X80 Advanced Rtu Communication Module 7
• Data Center Expert 6
• Ecostruxure Operator Terminal Expert 6
• Ecostruxure™ Power Monitoring Expert (pme) 6
• Ecostruxure™ Power Operation (epo) Advanced Reporting And Dashboards Module 6
• Modicon M580 Cpu (part Numbers Bmep* And Bmeh*) 6
• Sage 1410 6
• Sage 1430 6
• Sage 1450 6
• Sage 2400 6
• Sage 3030 Magnum 6
• Sage 4400 6
• Wiser Smart 6
• Modicon Controllers M258 / Lmc058 5
• Modicon M340 5
• Modicon Mc80 (bmkc80) 5
• Wonderware Information Server Portal 5
• Apc Easy Ups Online Monitoring Software 4
• Asco 5310 Single-channel Remote Annunciator 4
• Asco 5350 Eight Channel Remote Annunciator 4
• Easergy P5 4
• Ecostruxure Power Commission 4
• Ecostruxure Power Monitoring Expert (pme) 4
• Evlink Wallbox 4

Show 69 moreShow less

• Modicon Mc80 (part Numbers Bmkc80) 4
• Scada Expert Clearscada 4
• Easy Ups Online Monitoring Software 4
• Apc Easy Ups Online Monitoring Software (windows 10, 11 Windows Server 2016, 2019, 2022) 3
• C-bus Toolkit 3
• Conext™ Combox 3
• Easergy Studio 3
• Easergy T200 (dnp3) Models: T200i, T200e, T200p, T200s, T200h 3
• Easergy T200 (iec104) Models: T200i, T200e, T200p, T200s, T200h 3
• Easergy T200 (modbus) Models: T200i, T200e, T200p, T200s, T200h 3
• Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller 3
• Ecostruxure Foxboro Dcs Core Control Services 3
• Ecostruxure™ It Data Center Expert (formerly Known As Struxureware Data Center Expert) 3
• Enerlin’x Eife (lv851001) 3
• Enerlin’x Ife Interface (lv434001) 3
• Modicon Controllers M241 / M251 3
• Modicon Controllers M262 3
• Netbotz 4 - 355/450/455/550/570 3
• Powerlogic Hdpm6000 3
• Powerlogic™ P7 3
• Saitel Dp Remote Terminal Unit & Controller 3
• Saitel Dp Rtu 3
• Saitel Dr Rtu 3
• Smartconnect 3
• Trio Q Licensed Data Radio 3
• Accutech Manager 2
• C-bus Network Automation Controller, Lss5500nac 2
• Clipsal C-bus Network Automation Controller, 5500nac 2
• Clipsal Wiser For C-bus Automation Controller, 5500shac 2
• Connexium Network Manager 2
• Ecostruxure Building Operation Webstation 2
• Ecostruxure Building Operation Workstation 2
• Ecostruxure Enterprise Server 2
• Ecostruxure Foxboro Dcs Control Core Services 2
• Ecostruxure Geo Scada Expert 2019 - 2021 (formerly Known As Clearscada) 2
• Ecostruxure It Gateway 2
• Ecostruxure Power Build Rapsody 2
• Ecostruxure Power Monitoring Expert 2
• Ecostruxure Power Operation (epo) – Advanced Reporting And Dashboards Module 2
• Ecostruxure Power Scada Operation (pso) - Advanced Reporting And Dashboards Module 2
• Ecostruxure™ Cybersecurity Admin Expert (cae) 2
• Ecostruxuretm Enterprise Server 2
• Ecostruxure™ Power Build Rapsody 2
• Etg3000 Factorycast Hmi Gateway 2
• Evlink Home Smart 2
• Ion8650 2
• Ion8800 2
• Legacy Modicon Premium Cpus (tsxp57*) 2
• Legacy Modicon Quantum (140cpu65*) 2
• Modicon M221 2
• Modicon M580 Cpu (part Numbers Bmep* And Bmeh*, Excluding M580 Cpu Safety) 2
• Netbotz 5 - 750/755 2
• Opc Factory Server (ofs) 2
• Scadapack 47x 2
• Scadapack 47xi 2
• Scadapack 57x 2
• Somachine Hvac 2
• Somove 2
• Spacelogic As-b 2
• Spacelogic As-p 2
• Spacelogic C-bus Application Controller, 5500ac2 2
• Spacelogic C-bus Network Automation Controller, 5500nac2 2
• Triconex Tricon 2
• Trio E-series Ethernet Data Radio 2
• Trio J-series Ethernet Data Radio 2
• Trio Q-series Ethernet Data Radio 2
• Vampset 2
• Wiser For C-bus Automation Controller, Lss5500shac 2
• Zelio Soft 2 2

Newest

• schneider electric ecostruxure™ power build rapsody CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a... CVE-2026-119055 4.6 MediumNovember 11, 2026
• schneider electric sage rtu 1410, sage rtu 1430, sage rtu 1450 +3 more +5 more CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow... CVE-2026-102250 8.6 HighOctober 13, 2026
• schneider electric modicon m580, modicon m580 safety +1 more CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could... CVE-2026-3869 9.2 CriticalSeptember 11, 2026
• schneider electric scadapack 32, scadapack 3xx, scadapack 470r +4 more +6 more CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of... CVE-2026-81861 Public exploit 5.9 MediumSeptember 11, 2026
• schneider electric powerlogic t300 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'... CVE-2026-77120 8.7 HighSeptember 9, 2026
• schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert) CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized... CVE-2026-19233 8.6 HighSeptember 9, 2026
• schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert) CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')... CVE-2026-8044 8.6 HighSeptember 9, 2026
• schneider electric powerchute™ serial shutdown CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that... CVE-2026-13348 6.9 MediumSeptember 1, 2026
• schneider electric netbotz 5 - 750/755 CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a... CVE-2026-13337 5.1 MediumSeptember 1, 2026
• schneider electric netbotz 5 - 750/755 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'... CVE-2026-13336 7.3 HighSeptember 1, 2026
• schneider electric ecostruxure™ modicon communication server, ecostruxure™ opc ua server expert +1 more CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could... CVE-2024-10085 8.2 HighSeptember 1, 2026
• schneider electric igss definition (def.exe) CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially... CVE-2026-12927 8.4 HighJuly 29, 2026
• schneider electric remoteconnect, scadapack 47x, scadapack 47xi +1 more +3 more CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause... CVE-2026-0667 9.3 CriticalJuly 29, 2026
• schneider electric ecostruxure™ cybersecurity admin expert CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication... CVE-2026-14354 8.7 HighJuly 29, 2026
• schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 more CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to... CVE-2026-9718 6.9 MediumJune 25, 2026
• schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 more CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection')... CVE-2026-9717 8.6 HighJune 25, 2026
• schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 more CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service... CVE-2026-9716 8.7 HighJune 25, 2026
• schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller, schneider-electric easylogic t150 firmware +1 more +3 more CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause... CVE-2026-9651 6.7 MediumJune 25, 2026
• schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller, schneider-electric easylogic t150 firmware +1 more +3 more CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access... CVE-2026-9650 8.7 HighJune 25, 2026
• schneider electric ecostruxure™ it data center expert, schneider-electric struxureware data center expert +1 more CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could... CVE-2026-8045 7.1 HighJune 9, 2026
• schneider electric ecostruxure™ machine expert hvac, schneider-electric ecostruxure machine expert hvac +1 more Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC CVE-2026-6332 6.8 MediumMay 14, 2026
• schneider electric ecostruxure™ panel server, schneider-electric ecostruxure panel server pas400 firmware, ecostruxure panel server pas600 firmware +3 more +5 more Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server CVE-2026-6866 8.2 HighMay 12, 2026
• schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller +1 more Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products CVE-2026-6865 7.1 HighMay 12, 2026
• schneider electric easergy c5, easergy micom c264, easergy micom p30 +11 more +13 more Insufficient Entropy vulnerability on Multiple Products CVE-2026-4827 8.7 HighMay 12, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause ... CVE-2026-2401 2.4 LowApril 14, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that... CVE-2026-2400 5.3 MediumApril 14, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause... CVE-2026-2403 5.3 MediumApril 14, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive... CVE-2026-2405 5.3 MediumApril 14, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would... CVE-2026-2402 6.9 MediumApril 14, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log... CVE-2026-2404 6.9 MediumApril 14, 2026
• schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')... CVE-2026-2399 6.9 MediumApril 14, 2026
• schneider electric easergy micom p14x, easergy micom p24x, easergy micom p341 +9 more +11 more CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access... CVE-2026-4832 6.9 MediumApril 14, 2026
• schneider electric ecostruxure™ automation expert, schneider-electric ecostruxure automation expert +1 more CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could... CVE-2026-2273 7.2 HighMarch 10, 2026
• schneider electric ecostruxure™ foxboro dcs, schneider-electric ecostruxure foxboro dcs control software +1 more CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of... CVE-2026-1286 7.0 HighMarch 10, 2026
• schneider electric modicon controllers m241/m251, modicon controllers m258/lmc058, schneider-electric modicon lmc058 firmware +3 more +5 more CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2025-13902 5.1 MediumMarch 10, 2026
• schneider electric modicon m241/m251, modicon m262, schneider-electric modicon m241 firmware +2 more +4 more CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial... CVE-2025-13901 6.9 MediumMarch 10, 2026
• schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module, schneider-electric ecostruxure power monitoring expert +1 more +3 more CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code... CVE-2025-11739 8.5 HighMarch 10, 2026
• schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert) CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information... CVE-2025-13957 7.5 HighMarch 10, 2026
• schneider eelctric ecostruxure building operation workstation, schneider electric ecostruxure building operation webstation +1 more CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of... CVE-2026-1226 7.0 HighFebruary 11, 2026
• schneider eelctric ecostruxure building operation workstation, schneider electric ecostruxure building operation webstation +1 more CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could... CVE-2026-1227 7.0 HighFebruary 11, 2026
• schneider electric ecostruxure™ process expert, ecostruxure™ process expert for aveva system platform +1 more CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege... CVE-2025-13905 7.0 HighJanuary 29, 2026
• schneider electric ecostruxure power build rapsody, schneider-electric ecostruxure power build - rapsody +1 more CWE-416: Use After Free vulnerability that could cause remote code execution when the end user... CVE-2025-13845 8.4 HighJanuary 15, 2026
• schneider electric ecostruxure power build rapsody, schneider-electric ecostruxure power build - rapsody +1 more CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end... CVE-2025-13844 8.4 HighJanuary 15, 2026
• schneider electric powerchute™ serial shutdown CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system... CVE-2025-11567 7.3 HighNovember 12, 2025
• schneider electric powerchute™ serial shutdown CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that... CVE-2025-11566 6.9 MediumNovember 12, 2025
• schneider electric powerchute™ serial shutdown CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')... CVE-2025-11565 7.3 HighNovember 12, 2025
• schneider electric saitel dp rtu, saitel dr rtu +1 more CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'... CVE-2025-9997 5.8 MediumSeptember 9, 2025
• schneider electric saitel dp rtu, saitel dr rtu +1 more CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'... CVE-2025-9996 5.8 MediumSeptember 9, 2025
• schneider electric ats490 altivar soft starter, atv340e altivar machine drives, atv6000 medium voltage altivar process drives +5 more +7 more CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2025-7746 5.3 MediumSeptember 9, 2025
• schneider eelctric ecostruxure building operation enterprise server, ecostruxure building operation workstation, ecostruxuretm building operation enterprise server +3 more +5 more CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that... CVE-2025-8448 1.0 LowAugust 20, 2025
• Show olderLoading…