Skip to contentSchneider Electric vulnerabilities
Products
- Struxureware Data Center Expert15
- Ecostruxure Control Expert12
- Modicon M340 Cpu (part Numbers Bmxp34*)12
- Powerchute™ Serial Shutdown11
- Igss Data Server (igssdataserver.exe)10
- Ecostruxure Process Expert9
- Igss Dashboard (dashboard.exe)9
- Custom Reports (rms16.dll)8
- Igss Data Server(igssdataserver.exe)8
- Clearscada7
- Ecostruxure™ It Data Center Expert7
- Modicon Controllers M241/m2517
- Modicon M580 Cpu Safety (part Numbers Bmep58*s And Bmeh58*s)7
- Modicon Momentum Unity M1e Processor (171cbu*)7
- Opc Ua Modicon Communication Module7
- Pro-face Blue7
- X80 Advanced Rtu Communication Module7
- Data Center Expert6
- Ecostruxure Operator Terminal Expert6
- Ecostruxure™ Power Monitoring Expert (pme)6
- Ecostruxure™ Power Operation (epo) Advanced Reporting And Dashboards Module6
- Modicon M580 Cpu (part Numbers Bmep* And Bmeh*)6
- Sage 14106
- Sage 14306
- Sage 14506
- Sage 24006
- Sage 3030 Magnum6
- Sage 44006
- Wiser Smart6
- Modicon Controllers M258 / Lmc0585
- Modicon M3405
- Modicon Mc80 (bmkc80)5
- Wonderware Information Server Portal5
- Apc Easy Ups Online Monitoring Software4
- Asco 5310 Single-channel Remote Annunciator4
- Asco 5350 Eight Channel Remote Annunciator4
- Easergy P54
- Ecostruxure Power Commission4
- Ecostruxure Power Monitoring Expert (pme)4
- Evlink Wallbox4
- Modicon Mc80 (part Numbers Bmkc80)4
- Scada Expert Clearscada4
- Easy Ups Online Monitoring Software4
- Apc Easy Ups Online Monitoring Software (windows 10, 11 Windows Server 2016, 2019, 2022)3
- C-bus Toolkit3
- Conext™ Combox3
- Easergy Studio3
- Easergy T200 (dnp3) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (iec104) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (modbus) Models: T200i, T200e, T200p, T200s, T200h3
- Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller3
- Ecostruxure Foxboro Dcs Core Control Services3
- Ecostruxure™ It Data Center Expert (formerly Known As Struxureware Data Center Expert)3
- Enerlin’x Eife (lv851001)3
- Enerlin’x Ife Interface (lv434001)3
- Modicon Controllers M241 / M2513
- Modicon Controllers M2623
- Netbotz 4 - 355/450/455/550/5703
- Powerlogic Hdpm60003
- Powerlogic™ P73
Show 49 moreShow less
Newest
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the...CVE-2022-416697.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local...CVE-2022-416687.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-416677.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows...CVE-2022-416667.0 High
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-373025.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu +35 more +37 moreA CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that...CVE-2022-373009.8 Critical
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of...CVE-2022-347655.5 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-347645.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause...CVE-2022-347635.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-347625.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of...CVE-2022-347617.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could...CVE-2022-347607.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the...CVE-2022-347597.5 High
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog...CVE-2022-347585.1 Medium
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak...CVE-2022-347576.7 Medium
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...CVE-2022-347568.8 High
- schneider electric acti9 powertag link c, schneider-electric acti9 powertag link c \(a9xelc10-a\) firmware, acti9 powertag link c \(a9xelc10-b\) firmware +2 moreA CWE-269: Improper Privilege Management vulnerability exists that could allow elevated...CVE-2022-347546.8 Medium
- schneider electric spacelogic c-bus home controller, schneider-electric spacelogic c-bus home controller firmware +1 moreA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command...CVE-2022-34753EPSS 71.4%8.8 High
- schneider electric geo scada mobileA CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be...CVE-2022-325304.8 Medium
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over...CVE-2022-302388.3 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow...CVE-2022-302378.2 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow...CVE-2022-302368.2 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2022-302358.6 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to...CVE-2022-302349.4 Critical
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-20: Improper Input Validation vulnerability exists that could allow the product to be...CVE-2022-302336.5 Medium
- schneider electric power logic ion setup, schneider-electric powerlogic ion setup firmware +1 moreA CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code...CVE-2022-302328.0 High
- schneider electric scadapack workbenchA CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...CVE-2022-02215.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, scadapack remoteconnect for x70 +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal)...CVE-2021-22797EPSS 26.1%7.8 High
- schneider electric struxureware data center expertA CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection...CVE-2021-227959.1 Critical
- schneider electric struxureware data center expertA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2021-227949.1 Critical
- schneider-electric software update, schneider electric software update (sesu) – sut service component +1 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker...CVE-2019-68347.3 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-243235.3 Medium
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-243225.3 Medium
- schneider electric ritto wiser doorA CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the...CVE-2021-227838.8 High
- schneider electric smartconnect, schneider-electric scl series 1029 ups firmware, scl series 1030 ups firmware +6 more +8 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an...CVE-2022-22806EPSS 12.5%9.8 Critical
- schneider electric smartconnect, schneider-electric scl series 1029 ups firmware, scl series 1030 ups firmware +6 more +8 moreA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...CVE-2022-22805EPSS 11.9%9.8 Critical
- schneider electric apc smart-ups, smartconnect, schneider-electric scl series 1029 ups firmware +32 more +34 moreA CWE-287: Improper Authentication vulnerability exists that could cause an attacker to...CVE-2022-07159.1 Critical
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information...CVE-2022-227227.5 High
- schneider electric c-bus toolkitA CWE-269: Improper Privilege Management vulnerability exists in C-Bus Toolkit (V1.15.7 and prior...CVE-2021-227167.8 High
- schneider electric modicon controllers (m340 cpus, m340 communication modules, premium cpus, premium communication modules, quantum cpus, quantum communication modules - see security notification for specific versions), schneider-electric 140 cpu6x firmware, 140 noc 77101 firmware +8 more +10 moreA CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340...CVE-2019-68527.5 High
- schneider electric andover continuum models 9680, 5740 and 5720, bcx4040, bcx9640, 9900, 9940, 9924 and 9702, schneider-electric andover continuum 5720 firmware, andover continuum 5740 firmware +9 more +11 moreA CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum ...CVE-2019-68536.1 Medium
- schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90)...CVE-2019-68287.5 High
- schneider electric somachine hvacA CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier...CVE-2019-68267.8 High
- schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2...CVE-2019-68097.5 High
- schneider electric modicon m340, schneider electric se modicon m580, schneider-electric modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2...CVE-2019-68297.5 High
- schneider electric u.motion builder, u.motion builder software version 1.3.4 +1 moreA SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which...CVE-2018-7841In KEVPublic exploitEPSS 72.5%9.8 Critical
- abb 1sap120600r0071 pm554-tp-eth, pm554-tp-eth firmware, abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth +19 more +21 moreABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...CVE-2019-109537.5 High
- schneider electric ofs v3.5, schneider-electric opc factory server +1 moreA successful exploit of these vulnerabilities requires the local user to load a crafted DLL file...CVE-2015-10147.3 High
- aveva clearscadaIn Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and...CVE-2017-60217.5 High
- schneider electric triconex tricon, schneider-electric triconex tricon mp 3008 firmware +1 moreIn Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls...CVE-2018-88728.1 High
- Show moreLoading…