Skip to contentSchneider Electric vulnerabilities
Products
- Struxureware Data Center Expert15
- Ecostruxure Control Expert12
- Modicon M340 Cpu (part Numbers Bmxp34*)12
- Powerchute™ Serial Shutdown11
- Igss Data Server (igssdataserver.exe)10
- Ecostruxure Process Expert9
- Igss Dashboard (dashboard.exe)9
- Custom Reports (rms16.dll)8
- Igss Data Server(igssdataserver.exe)8
- Clearscada7
- Ecostruxure™ It Data Center Expert7
- Modicon Controllers M241/m2517
- Modicon M580 Cpu Safety (part Numbers Bmep58*s And Bmeh58*s)7
- Modicon Momentum Unity M1e Processor (171cbu*)7
- Opc Ua Modicon Communication Module7
- Pro-face Blue7
- X80 Advanced Rtu Communication Module7
- Data Center Expert6
- Ecostruxure Operator Terminal Expert6
- Ecostruxure™ Power Monitoring Expert (pme)6
- Ecostruxure™ Power Operation (epo) Advanced Reporting And Dashboards Module6
- Modicon M580 Cpu (part Numbers Bmep* And Bmeh*)6
- Sage 14106
- Sage 14306
- Sage 14506
- Sage 24006
- Sage 3030 Magnum6
- Sage 44006
- Wiser Smart6
- Modicon Controllers M258 / Lmc0585
- Modicon M3405
- Modicon Mc80 (bmkc80)5
- Wonderware Information Server Portal5
- Apc Easy Ups Online Monitoring Software4
- Asco 5310 Single-channel Remote Annunciator4
- Asco 5350 Eight Channel Remote Annunciator4
- Easergy P54
- Ecostruxure Power Commission4
- Ecostruxure Power Monitoring Expert (pme)4
- Evlink Wallbox4
- Modicon Mc80 (part Numbers Bmkc80)4
- Scada Expert Clearscada4
- Easy Ups Online Monitoring Software4
- Apc Easy Ups Online Monitoring Software (windows 10, 11 Windows Server 2016, 2019, 2022)3
- C-bus Toolkit3
- Conext™ Combox3
- Easergy Studio3
- Easergy T200 (dnp3) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (iec104) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (modbus) Models: T200i, T200e, T200p, T200s, T200h3
- Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller3
- Ecostruxure Foxboro Dcs Core Control Services3
- Ecostruxure™ It Data Center Expert (formerly Known As Struxureware Data Center Expert)3
- Enerlin’x Eife (lv851001)3
- Enerlin’x Ife Interface (lv434001)3
- Modicon Controllers M241 / M2513
- Modicon Controllers M2623
- Netbotz 4 - 355/450/455/550/5703
- Powerlogic Hdpm60003
- Powerlogic™ P73
Show 49 moreShow less
Newest
- schneider electric web designer for bmenoc0311(c), web designer for bmenoc0321(c), web designer for bmxnoe0110(h) +1 more +3 moreCWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...CVE-2024-124768.4 High
- schneider electric pro-face gp-pro ex, pro-face remote hmi +1 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel...CVE-2024-123996.1 Medium
- schneider electric bmenor2200h, evlink pro ac, modicon m580 cpu (part numbers bmep* and bmeh*, excluding m580 cpu safety) +1 more +3 moreCWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of...CVE-2024-114258.7 High
- schneider electric ecostruxure™ power build rapsodyCWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2024-111394.6 Medium
- schneider electric harmony (formerly magelis) hmist6, hmistm6, hmig3u, hmig3x, hmisto7 series with ecostruxure operator terminal expert runtime, pfxst6000, pfxstm6000, pfxsp5000, pfxgp4100 series with pro-face blue runtime +1 moreCWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause...CVE-2024-119998.7 High
- schneider electric modicon controllers m241 / m251, modicon controllers m258 / lmc058 +1 moreCWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and...CVE-2024-117379.3 Critical
- schneider electric powerchute serial shutdownCWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the...CVE-2024-10511Public exploit6.3 Medium
- schneider electric ecostruxure it gatewayCWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when...CVE-2024-1057510.0 Critical
- schneider electric powerlogic pm5320, powerlogic pm5340, powerlogic pm5341 +3 more +5 moreCWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to...CVE-2024-94098.7 High
- schneider electric modicon m340 cpu (part numbers bmxp34*)CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality...CVE-2024-89368.3 High
- schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 moreCWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2024-89389.2 Critical
- schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +2 moreCWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2024-89378.3 High
- schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 moreCWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of...CVE-2024-89357.7 High
- schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel...CVE-2024-89337.5 High
- schneider electric evlink home smart, charge +1 moreCWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test...CVE-2024-80708.5 High
- schneider electric data center expertCWE-306: Missing Authentication for Critical Function vulnerability exists that could
cause...CVE-2024-85305.9 Medium
- schneider electric data center expertCWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could...CVE-2024-85317.2 High
- schneider electric easergy studioCWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized
access,...CVE-2024-90027.8 High
- schneider electric system monitor application in harmony industrial pc hmibmo/hmibmi/hmipso/hmibmp/hmibmu/hmipsp/hmipep series, system monitor application in pro-face industrial pc ps5000 series, system monitor application in harmony industrial pc hmibmo hmibmi hmipso hmibmp hmibmu hmipsp hmipep series +2 moreCWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...CVE-2024-88849.8 Critical
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power monitoring expert +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be...CVE-2024-90057.3 High
- schneider electric zelio soft 2CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft...CVE-2024-85183.3 Low
- schneider electric zelio soft 2CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial
of...CVE-2024-84227.8 High
- schneider electric vijeo designer, vijeo designer embedded in ecostruxure™ machine expert, schneider-electric vijeo designer embedded in ecostruxure machine expert +2 moreCWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized
access,...CVE-2024-83067.8 High
- schneider electric accutech managerCWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...CVE-2024-69187.5 High
- schneider electric wiser home controller whc-5918a, schneider-electric whc-5918a firmware +1 moreCWE-200: Information Exposure vulnerability exists that could cause disclosure of
credentials...CVE-2024-64079.8 Critical
- schneider electric modicon controllers m241 / m251, modicon controllers m258 / lmc058, modicon controllers m262 +5 more +7 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting')...CVE-2024-65285.4 Medium
- schneider electric foxrtu stationCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path
Traversal')...CVE-2024-26027.3 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service,...CVE-2024-56817.8 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of...CVE-2024-56807.1 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or...CVE-2024-56797.1 High
- schneider electric ecostruxure it gatewayCWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege...CVE-2024-08657.8 High
- schneider electric powerlogic p5, schneider-electric powerlogic p5 firmware +1 moreCWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could
cause...CVE-2024-55596.1 Medium
- schneider electric easergy studioCWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could...CVE-2024-27477.8 High
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability...CVE-2024-370405.4 Medium
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the...CVE-2024-370395.9 Medium
- schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 moreCWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated...CVE-2024-370387.5 High
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path
Traversal’)...CVE-2024-370378.1 High
- schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 moreCWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass...CVE-2024-370369.8 Critical
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the
device...CVE-2024-55605.3 Medium
- schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 moreCWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause...CVE-2024-55574.5 Medium
- schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 moreCWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could
cause...CVE-2024-55586.4 Medium
- schneider electric evlink home smart, schneider-electric evlink home firmware +1 moreCWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH
interface...CVE-2024-53136.5 Medium
- schneider electric modicon m340, network module, modicon m340, ethernet tcp/ip bmxnoe0110, network module, modicon m340, modbus/tcp bmxnoe0100 +5 more +7 moreCWE-552: Files or Directories Accessible to External Parties vulnerability exists which may...CVE-2024-50566.5 Medium
- schneider electric ecostruxure power design - ecodial, schneider-electric ecostruxure power monitoring expert +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code...CVE-2024-22297.8 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +1 more +3 moreCWE-552: Files or Directories Accessible to External Parties vulnerability exists that could...CVE-2024-20527.5 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +2 moreCWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)...CVE-2024-20508.2 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +5 more +7 moreCWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2024-20519.8 Critical
- schneider electric harmony control relay rmnf22tb30, harmony timer relay renf22r2mmw, se renf22r2mmw firmware +1 more +3 moreCWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering
of...CVE-2024-05688.8 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized...CVE-2023-279757.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +46 more +48 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication...CVE-2023-64088.1 High
- Show moreLoading…