Skip to contentSchneider Electric vulnerabilities
Products
- Struxureware Data Center Expert15
- Ecostruxure Control Expert12
- Modicon M340 Cpu (part Numbers Bmxp34*)12
- Powerchute™ Serial Shutdown11
- Igss Data Server (igssdataserver.exe)10
- Ecostruxure Process Expert9
- Igss Dashboard (dashboard.exe)9
- Custom Reports (rms16.dll)8
- Igss Data Server(igssdataserver.exe)8
- Clearscada7
- Ecostruxure™ It Data Center Expert7
- Modicon Controllers M241/m2517
- Modicon M580 Cpu Safety (part Numbers Bmep58*s And Bmeh58*s)7
- Modicon Momentum Unity M1e Processor (171cbu*)7
- Opc Ua Modicon Communication Module7
- Pro-face Blue7
- X80 Advanced Rtu Communication Module7
- Data Center Expert6
- Ecostruxure Operator Terminal Expert6
- Ecostruxure™ Power Monitoring Expert (pme)6
- Ecostruxure™ Power Operation (epo) Advanced Reporting And Dashboards Module6
- Modicon M580 Cpu (part Numbers Bmep* And Bmeh*)6
- Sage 14106
- Sage 14306
- Sage 14506
- Sage 24006
- Sage 3030 Magnum6
- Sage 44006
- Wiser Smart6
- Modicon Controllers M258 / Lmc0585
- Modicon M3405
- Modicon Mc80 (bmkc80)5
- Wonderware Information Server Portal5
- Apc Easy Ups Online Monitoring Software4
- Asco 5310 Single-channel Remote Annunciator4
- Asco 5350 Eight Channel Remote Annunciator4
- Easergy P54
- Ecostruxure Power Commission4
- Ecostruxure Power Monitoring Expert (pme)4
- Evlink Wallbox4
- Modicon Mc80 (part Numbers Bmkc80)4
- Scada Expert Clearscada4
- Easy Ups Online Monitoring Software4
- Apc Easy Ups Online Monitoring Software (windows 10, 11 Windows Server 2016, 2019, 2022)3
- C-bus Toolkit3
- Conext™ Combox3
- Easergy Studio3
- Easergy T200 (dnp3) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (iec104) Models: T200i, T200e, T200p, T200s, T200h3
- Easergy T200 (modbus) Models: T200i, T200e, T200p, T200s, T200h3
- Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller3
- Ecostruxure Foxboro Dcs Core Control Services3
- Ecostruxure™ It Data Center Expert (formerly Known As Struxureware Data Center Expert)3
- Enerlin’x Eife (lv851001)3
- Enerlin’x Ife Interface (lv434001)3
- Modicon Controllers M241 / M2513
- Modicon Controllers M2623
- Netbotz 4 - 355/450/455/550/5703
- Powerlogic Hdpm60003
- Powerlogic™ P73
Show 49 moreShow less
Newest
- schneider eelctric ecostruxure building operation workstation, ecostruxuretm building operation enterprise server, ecostruxuretm workstation +3 more +5 moreCWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of...CVE-2025-84494.1 Medium
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2025-549274.9 Medium
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2025-549267.2 High
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized...CVE-2025-549257.5 High
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized...CVE-2025-549247.5 High
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code...CVE-2025-549238.7 High
- schneider electric saitel dp rtu, saitel dr rtu +1 moreCWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation...CVE-2025-84538.4 High
- schneider electric sesuCWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that...CVE-2025-52967.0 High
- schneider electric bmxngd0100: m580 global data module, bmxnoc0401: modicon m340 x80 ethernet communication modules, bmxnoe0100: modbus/tcp ethernet modicon m340 module +3 more +5 moreCWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when...CVE-2025-66258.7 High
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) advanced reporting and dashboards module, ecostruxure™ power monitoring expert +1 more +3 moreCWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram...CVE-2025-67885.3 Medium
- schneider electric ecostruxure™ it data center expertCWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation...CVE-2025-501247.2 High
- schneider electric ecostruxure™ it data center expertCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated...CVE-2025-501256.3 Medium
- schneider electric ecostruxure™ it data center expertCWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could...CVE-2025-501237.2 High
- schneider electric ecostruxure™ it data center expertCWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when...CVE-2025-501228.9 High
- schneider electric ecostruxure™ it data center expertCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'...CVE-2025-50121EPSS 22.1%9.5 Critical
- schneider electric ecostruxure™ it data center expertCWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...CVE-2025-64385.9 Medium
- schneider electric modicon controllers m241/m251, modicon controllers m262 +1 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-31175.1 Medium
- schneider electric modicon controllers m241/m251, modicon controllers m258 / lmc058 +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an...CVE-2025-31167.1 High
- schneider electric modicon controllers m241/m251, modicon controllers m258 / lmc058 +1 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-39055.1 Medium
- schneider electric modicon controllers m241/m251CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of...CVE-2025-31127.1 High
- schneider electric modicon controllers m241/m251CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-38995.1 Medium
- schneider electric modicon controllers m241/m251, modicon controllers m262 +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an...CVE-2025-38987.1 High
- schneider electric evlink wallboxCWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command...CVE-2025-57437.0 High
- schneider electric evlink wallboxCWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)...CVE-2025-57425.1 Medium
- schneider electric evlink wallboxCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2025-57416.9 Medium
- schneider electric evlink wallboxCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2025-57408.6 High
- schneider electric modicon controllers m241 / m251, modicon controllers m258 / lmc058 +1 moreCWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists...CVE-2025-28758.7 High
- schneider electric ecostruxure™ power build rapsody softwareCWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being...CVE-2025-39164.6 Medium
- schneider electric trio q licensed data radioCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...CVE-2025-24425.4 Medium
- schneider electric trio q licensed data radioCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...CVE-2025-24414.1 Medium
- schneider electric trio q licensed data radioCWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially...CVE-2025-24404.1 Medium
- schneider electric connexium network managerCWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality...CVE-2025-22238.4 High
- schneider electric connexium network managerCWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that...CVE-2025-22228.2 High
- schneider electric webhmi – deployed with ecostruxure power automation systemCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...CVE-2025-19609.8 Critical
- schneider electric ecostruxure power automation system user interface (epas-ui) - secured versionsCWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass...CVE-2025-08137.0 High
- schneider electric ecostruxure panel serverCWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause...CVE-2025-20024.0 Medium
- schneider electric enerlin’x eife (lv851001), enerlin’x ife interface (lv434001) +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the...CVE-2025-08146.9 Medium
- schneider electric enerlin’x eife (lv851001), enerlin’x ife interface (lv434001) +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the...CVE-2025-08157.1 High
- schneider electric enerlin’x eife (lv851001), enerlin’x ife interface (lv434001) +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the...CVE-2025-08167.1 High
- schneider electric ecostruxure process expert, ecostruxure process expert for aveva system platform +1 moreCWE-269: Improper Privilege Management vulnerability exists for two services (of which one...CVE-2025-03278.5 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render...CVE-2025-10707.2 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result...CVE-2025-10608.7 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could...CVE-2025-10598.7 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-494: Download of Code Without Integrity Check vulnerability exists that could render the...CVE-2025-10587.2 High
- schneider electric uni-telway driver, uni-telway driver used in ecostruxure control expert, uni-telway driver used in ecostruxure process expert +2 more +4 moreCWE-20: Improper Input Validation vulnerability exists that could cause denial of service of...CVE-2024-100836.8 Medium
- schneider electric ecostruxure power monitoring expert (pme) 2020, ecostruxure power monitoring expert (pme) 2021, ecostruxure power operation (epo) 2021 +4 more +6 moreCWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)...CVE-2024-84015.4 Medium
- schneider electric powerlogic hdpm6000CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2024-104986.9 Medium
- schneider electric powerlogic hdpm6000CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow...CVE-2024-104978.7 High
- schneider electric remoteconnect and scadapack x70 utilitiesCWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of...CVE-2024-127038.5 High
- schneider electric bmxnoe0100, bmxnoe0110, bmxnor0200h +1 more +3 moreCWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...CVE-2024-121428.8 High
- Show moreLoading…