Skip to contentSchneider Electric vulnerabilities
Products
- Struxureware Data Center Expert15
- Ecostruxure Control Expert12
- Modicon M340 Cpu (part Numbers Bmxp34*)12
- Powerchute™ Serial Shutdown11
- Igss Data Server (igssdataserver.exe)10
- Ecostruxure Process Expert9
- Igss Dashboard (dashboard.exe)9
- Custom Reports (rms16.dll)8
- Igss Data Server(igssdataserver.exe)8
- Clearscada7
- Ecostruxure™ It Data Center Expert7
- Modicon Controllers M241/m2517
- Modicon M580 Cpu Safety (part Numbers Bmep58*s And Bmeh58*s)7
- Modicon Momentum Unity M1e Processor (171cbu*)7
- Opc Ua Modicon Communication Module7
- Pro-face Blue7
- X80 Advanced Rtu Communication Module7
- Data Center Expert6
- Ecostruxure Operator Terminal Expert6
- Ecostruxure™ Power Monitoring Expert (pme)6
- Ecostruxure™ Power Operation (epo) Advanced Reporting And Dashboards Module6
- Modicon M580 Cpu (part Numbers Bmep* And Bmeh*)6
- Sage 14106
- Sage 14306
- Sage 14506
- Sage 24006
- Sage 3030 Magnum6
- Sage 44006
- Wiser Smart6
- Modicon Controllers M258 / Lmc0585
- Modicon M3405
- Modicon Mc80 (bmkc80)5
- Wonderware Information Server Portal5
- Apc Easy Ups Online Monitoring Software4
- Asco 5310 Single-channel Remote Annunciator4
- Asco 5350 Eight Channel Remote Annunciator4
- Easergy P54
- Ecostruxure Power Commission4
- Ecostruxure Power Monitoring Expert (pme)4
- Evlink Wallbox4
- Modicon Mc80 (part Numbers Bmkc80)4
- Scada Expert Clearscada4
- Easy Ups Online Monitoring Software4
- Apc Easy Ups Online Monitoring Software (windows 10, 11 Windows Server 2016, 2019, 2022)3
- C-bus Toolkit3
- Conext™ Combox3
- Easergy Studio3
- Easergy T200 (dnp3) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (iec104) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (modbus) Models: T200i, T200e, T200p, T200s, T200h3
- Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller3
- Ecostruxure Foxboro Dcs Core Control Services3
- Ecostruxure™ It Data Center Expert (formerly Known As Struxureware Data Center Expert)3
- Enerlin’x Eife (lv851001)3
- Enerlin’x Ife Interface (lv434001)3
- Modicon Controllers M241 / M2513
- Modicon Controllers M2623
- Netbotz 4 - 355/450/455/550/5703
- Powerlogic Hdpm60003
- Powerlogic™ P73
Show 49 moreShow less
Newest
- schneider electric ecostruxure control expertA CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause
remote...CVE-2023-279768.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a...CVE-2023-279847.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server...CVE-2023-279836.5 Medium
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server...CVE-2023-279828.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in...CVE-2023-279817.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server...CVE-2023-279808.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server...CVE-2023-279796.5 Medium
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...CVE-2023-279787.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server...CVE-2023-279776.5 Medium
- schneider electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 more +3 moreA CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the...CVE-2023-05955.3 Medium
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege...CVE-2022-429737.8 High
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could...CVE-2022-429727.8 High
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause...CVE-2022-429719.8 Critical
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-306: Missing Authentication for Critical Function The software does not perform any...CVE-2022-429709.8 Critical
- schneider electric ecostruxure power commissionA CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to...CVE-2022-40627.8 High
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-243249.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer...CVE-2022-23299.8 Critical
- schneider electric legacy modicon quantum, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +44 more +46 moreA CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive...CVE-2021-227867.5 High
- schneider electric ecostruxure geo scada expert 2019 - 2021 (formerly known as clearscada), schneider-electric ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 more +3 moreA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...CVE-2023-226117.5 High
- schneider electric ecostruxure geo scada expert 2019 - 2021 (formerly known as clearscada), schneider-electric ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 more +3 moreA CWE-285: Improper Authorization vulnerability exists that could cause Denial of Service against...CVE-2023-226109.1 Critical
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +37 more +39 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause...CVE-2022-457898.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, legacy modicon quantum (140cpu65*) and premium cpus (tsxp57*) +58 more +60 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-457887.5 High
- schneider electric ecostruxure™ cybersecurity admin expert (cae), schneider-electric ecostruxure cybersecurity admin expert +1 moreA CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software...CVE-2022-327487.9 High
- schneider electric ecostruxure™ cybersecurity admin expert (cae), schneider-electric ecostruxure cybersecurity admin expert +1 moreA CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate...CVE-2022-327478.0 High
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325299.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...CVE-2022-325288.6 High
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325279.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325269.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325259.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325249.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325239.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-325229.8 Critical
- schneider electric data center expertA CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be...CVE-2022-325217.1 High
- schneider electric data center expertA CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in...CVE-2022-325208.0 High
- schneider electric data center expertA CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in...CVE-2022-325198.0 High
- schneider electric data center expertA CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in...CVE-2022-325188.0 High
- schneider electric conext™ combox, schneider-electric conext combox firmware +1 moreA CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...CVE-2022-325176.5 Medium
- schneider electric conext™ combox, schneider-electric conext combox firmware +1 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s...CVE-2022-325167.5 High
- schneider electric conext™ combox, schneider-electric conext combox firmware +1 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2022-325158.6 High
- schneider electric c-bus network automation controller, lss5500nac, clipsal c-bus network automation controller, 5500nac, clipsal wiser for c-bus automation controller, 5500shac +9 more +11 moreA CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain...CVE-2022-325149.8 Critical
- schneider electric c-bus network automation controller, lss5500nac, clipsal c-bus network automation controller, 5500nac, clipsal wiser for c-bus automation controller, 5500shac +9 more +11 moreA CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain...CVE-2022-325139.8 Critical
- schneider electric canbrassA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-325125.3 Medium
- schneider electric ecostruxure machine expert – hvac, somachine hvac, schneider-electric ecostruxure machine expert - hvac +2 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information...CVE-2022-29884.3 Medium
- schneider electric ecostruxure power commissionA CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote...CVE-2022-227323.9 Low
- schneider electric ecostruxure power commissionA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-227316.5 Medium
- schneider electric ecostruxure power commissionA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-02236.5 Medium
- schneider electric legacy modicon quantum/premium, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +50 more +52 moreA CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial...CVE-2022-373017.5 High
- schneider electric modicon m340 cpus, modicon m340 x80 ethernet communication modules: bmxnoe0100 (h) bmxnoe0110 (h) bmxnor0200h rtu, schneider-electric modicon m340 bmxnoe0100 firmware +13 more +15 moreA CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of...CVE-2022-02227.5 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’)...CVE-2022-416717.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-416707.0 High
- Show moreLoading…