Skip to contentSchneider Electric vulnerabilities
Products
- Struxureware Data Center Expert15
- Ecostruxure Control Expert12
- Modicon M340 Cpu (part Numbers Bmxp34*)12
- Powerchute™ Serial Shutdown11
- Igss Data Server (igssdataserver.exe)10
- Ecostruxure Process Expert9
- Igss Dashboard (dashboard.exe)9
- Custom Reports (rms16.dll)8
- Igss Data Server(igssdataserver.exe)8
- Clearscada7
- Ecostruxure™ It Data Center Expert7
- Modicon Controllers M241/m2517
- Modicon M580 Cpu Safety (part Numbers Bmep58*s And Bmeh58*s)7
- Modicon Momentum Unity M1e Processor (171cbu*)7
- Opc Ua Modicon Communication Module7
- Pro-face Blue7
- X80 Advanced Rtu Communication Module7
- Data Center Expert6
- Ecostruxure Operator Terminal Expert6
- Ecostruxure™ Power Monitoring Expert (pme)6
- Ecostruxure™ Power Operation (epo) Advanced Reporting And Dashboards Module6
- Modicon M580 Cpu (part Numbers Bmep* And Bmeh*)6
- Sage 14106
- Sage 14306
- Sage 14506
- Sage 24006
- Sage 3030 Magnum6
- Sage 44006
- Wiser Smart6
- Modicon Controllers M258 / Lmc0585
- Modicon M3405
- Modicon Mc80 (bmkc80)5
- Wonderware Information Server Portal5
- Apc Easy Ups Online Monitoring Software4
- Asco 5310 Single-channel Remote Annunciator4
- Asco 5350 Eight Channel Remote Annunciator4
- Easergy P54
- Ecostruxure Power Commission4
- Ecostruxure Power Monitoring Expert (pme)4
- Evlink Wallbox4
- Modicon Mc80 (part Numbers Bmkc80)4
- Scada Expert Clearscada4
- Easy Ups Online Monitoring Software4
- Apc Easy Ups Online Monitoring Software (windows 10, 11 Windows Server 2016, 2019, 2022)3
- C-bus Toolkit3
- Conext™ Combox3
- Easergy Studio3
- Easergy T200 (dnp3) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (iec104) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (modbus) Models: T200i, T200e, T200p, T200s, T200h3
- Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller3
- Ecostruxure Foxboro Dcs Core Control Services3
- Ecostruxure™ It Data Center Expert (formerly Known As Struxureware Data Center Expert)3
- Enerlin’x Eife (lv851001)3
- Enerlin’x Ife Interface (lv434001)3
- Modicon Controllers M241 / M2513
- Modicon Controllers M2623
- Netbotz 4 - 355/450/455/550/5703
- Powerlogic Hdpm60003
- Powerlogic™ P73
Show 49 moreShow less
Newest
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access...CVE-2023-64097.7 High
- schneider electric easergy studioA CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker...CVE-2023-70327.8 High
- schneider electric easy ups online monitoring softwareA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2023-64075.3 Medium
- schneider electric trio e-series ethernet data radio, trio j-series ethernet data radio, trio q-series ethernet data radio +16 more +18 moreA CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a...CVE-2023-56306.5 Medium
- schneider electric trio e-series ethernet data radio, trio j-series ethernet data radio, trio q-series ethernet data radio +16 more +18 moreA CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could...CVE-2023-56298.2 High
- schneider electric galaxy vl, galaxy vs, schneider-electric galaxy vl firmware +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2023-60325.3 Medium
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) – advanced reporting and dashboards module, ecostruxure power scada operation (pso) - advanced reporting and dashboards module +1 more +3 moreA CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)...CVE-2023-59876.1 Medium
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) – advanced reporting and dashboards module, ecostruxure power scada operation (pso) - advanced reporting and dashboards module +1 more +3 moreA CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an...CVE-2023-59868.2 High
- schneider electric ion8650, ion8800, schneider-electric ion8650 firmware +1 more +3 moreA CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability
exists that...CVE-2023-59854.8 Medium
- schneider electric ion8650, ion8800, schneider-electric ion8650 firmware +1 more +3 moreA CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow...CVE-2023-59847.2 High
- schneider electric ecostruxure power monitoring expert, ecostruxure power operation (epo) with advanced reports, ecostruxure power scada operation with advanced reports +1 more +3 moreA?CWE-502:?Deserialization of untrusted data?vulnerability exists?that could allow an attacker...CVE-2023-53919.8 Critical
- schneider electric c-bus toolkit, schneider-electric spacelogic c-bus toolkit +1 moreA?CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2023-5399EPSS 36.4%9.8 Critical
- schneider electric c-bus toolkitA?CWE-269: Improper Privilege Management vulnerability exists?that could cause?a local privilege...CVE-2023-54029.8 Critical
- schneider electric igss update service (igssupdateservice.exe), schneider-electric interactive graphical scada system +1 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update...CVE-2023-45167.8 High
- schneider electric gp-pro ex wingp for ipc, gp-pro ex wingp for pc/at, schneider-electric pro-face gp-pro ex +2 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory
Buffer vulnerability...CVE-2023-39535.3 Medium
- schneider electric accutech managerA CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability...CVE-2023-294147.8 High
- schneider electric ecostruxure opc ua server expertA CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that
could...CVE-2023-372005.5 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-371996.8 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-371986.8 Medium
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
(...CVE-2023-371978.8 High
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL...CVE-2023-371968.8 High
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-129: Improper Validation of Array Index vulnerability exists that could cause local...CVE-2023-25707.0 High
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service,...CVE-2023-25697.8 High
- schneider electric igss dashboard (dashboard.exe), schneider-electric igss dashboard +1 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...CVE-2023-3001EPSS 31.9%7.8 High
- schneider electric ecostruxure™ operator terminal expert, pro-face blue, schneider-electric ecostruxure operator terminal expert +2 moreA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-10497.8 High
- schneider electric legacy ion products, powerlogic ion7400, powerlogic ion8650 +8 more +10 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause...CVE-2022-466808.8 High
- schneider electric opc factory server (ofs), schneider-electric opc factory server +1 moreA CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that
could...CVE-2023-21615.0 Medium
- schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +12 more +14 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that...CVE-2023-256206.5 Medium
- schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +11 more +13 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could...CVE-2023-256197.5 High
- schneider electric powerlogic hdpm6000, schneider-electric powerlogic hdpm6000 firmware +1 moreA CWE-129: Improper validation of an array index vulnerability exists where a specially...CVE-2023-280049.8 Critical
- schneider electric conext gateway, insightfacility, insighthome +3 more +5 moreA CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated...CVE-2023-294107.2 High
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...CVE-2023-294137.5 High
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote...CVE-2023-294129.8 Critical
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow...CVE-2023-294119.8 Critical
- schneider electric ecostruxure power monitoring expertA CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker...CVE-2023-280036.7 Medium
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...CVE-2023-255555.6 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255536.1 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255516.1 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255507.2 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255497.2 High
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command...CVE-2023-255547.8 High
- schneider electric struxureware data center expertA CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized...CVE-2023-255528.1 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow access to device...CVE-2023-255488.8 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution...CVE-2023-255478.8 High
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that...CVE-2022-433786.5 Medium
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists...CVE-2022-433777.5 High
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting')...CVE-2022-433767.6 High
- schneider electric easergy builder installerA CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker...CVE-2022-347556.3 Medium
- schneider electric merten instabus tastermodul 1fach system m 625199, merten instabus tastermodul 2fach system m 625299, merten jalousie-/schaltaktor reg-k/8x/16x/10 m. hb 649908 +11 more +13 moreA CWE-287: Improper Authentication vulnerability exists that could allow a device to be...CVE-2023-255568.3 High
- schneider electric ecostruxure control expertA CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to...CVE-2023-15485.5 Medium
- Show moreLoading…