Skip to content
Schneider-electric vulnerabilities
Products
Show 160 moreShow less
Newest
-
schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 more
CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to...
CVE-2026-9718
6.9 Medium
-
schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 more
CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection')...
CVE-2026-9717
8.6 High
-
schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 more
CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service...
CVE-2026-9716
8.7 High
-
schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller, schneider-electric easylogic t150 firmware +1 more +3 more
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause...
CVE-2026-9651
6.7 Medium
-
schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller, schneider-electric easylogic t150 firmware +1 more +3 more
CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access...
CVE-2026-9650
8.7 High
-
schneider electric ecostruxure™ it data center expert, schneider-electric struxureware data center expert +1 more
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could...
CVE-2026-8045
7.1 High
-
schneider electric ecostruxure™ machine expert hvac, schneider-electric ecostruxure machine expert hvac +1 more
Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
CVE-2026-6332
6.8 Medium
-
schneider electric ecostruxure™ panel server, schneider-electric ecostruxure panel server pas400 firmware, ecostruxure panel server pas600 firmware +3 more +5 more
Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server
CVE-2026-6866
8.2 High
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause ...
CVE-2026-2401
2.4 Low
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that...
CVE-2026-2400
5.3 Medium
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause...
CVE-2026-2403
5.3 Medium
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive...
CVE-2026-2405
5.3 Medium
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would...
CVE-2026-2402
6.9 Medium
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log...
CVE-2026-2404
6.9 Medium
-
schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 more
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...
CVE-2026-2399
6.9 Medium
-
schneider electric ecostruxure™ automation expert, schneider-electric ecostruxure automation expert +1 more
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could...
CVE-2026-2273
7.2 High
-
schneider electric ecostruxure™ foxboro dcs, schneider-electric ecostruxure foxboro dcs control software +1 more
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of...
CVE-2026-1286
7.0 High
-
schneider electric modicon controllers m241/m251, modicon controllers m258/lmc058, schneider-electric modicon lmc058 firmware +3 more +5 more
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2025-13902
5.1 Medium
-
schneider electric modicon m241/m251, modicon m262, schneider-electric modicon m241 firmware +2 more +4 more
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial...
CVE-2025-13901
6.9 Medium
-
schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module, schneider-electric ecostruxure power monitoring expert +1 more +3 more
CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code...
CVE-2025-11739
8.5 High
-
schneider electric ecostruxure power build rapsody, schneider-electric ecostruxure power build - rapsody +1 more
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user...
CVE-2025-13845
8.4 High
-
schneider electric ecostruxure power build rapsody, schneider-electric ecostruxure power build - rapsody +1 more
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end...
CVE-2025-13844
8.4 High
-
schneider electric ecostruxure it gateway
CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when...
CVE-2024-10575
10.0 Critical
-
schneider electric powerlogic pm5320, powerlogic pm5340, powerlogic pm5341 +3 more +5 more
CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to...
CVE-2024-9409
8.7 High
-
schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 more
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...
CVE-2024-8938
9.2 Critical
-
schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 more
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of...
CVE-2024-8935
7.7 High
-
schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 more
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel...
CVE-2024-8933
7.5 High
-
schneider electric data center expert
CWE-306: Missing Authentication for Critical Function vulnerability exists that could
cause...
CVE-2024-8530
5.9 Medium
-
schneider electric data center expert
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could...
CVE-2024-8531
7.2 High
-
schneider electric easergy studio
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized
access,...
CVE-2024-9002
7.8 High
-
schneider electric zelio soft 2
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial
of...
CVE-2024-8422
7.8 High
-
schneider electric vijeo designer, vijeo designer embedded in ecostruxure™ machine expert, schneider-electric vijeo designer embedded in ecostruxure machine expert +2 more
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized
access,...
CVE-2024-8306
7.8 High
-
schneider electric accutech manager
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...
CVE-2024-6918
7.5 High
-
schneider electric wiser home controller whc-5918a, schneider-electric whc-5918a firmware +1 more
CWE-200: Information Exposure vulnerability exists that could cause disclosure of
credentials...
CVE-2024-6407
9.8 Critical
-
schneider electric modicon controllers m241 / m251, modicon controllers m258 / lmc058, modicon controllers m262 +5 more +7 more
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting')...
CVE-2024-6528
5.4 Medium
-
schneider electric foxrtu station
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path
Traversal')...
CVE-2024-2602
7.3 High
-
schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 more
CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service,...
CVE-2024-5681
7.8 High
-
schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 more
CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of...
CVE-2024-5680
7.1 High
-
schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 more
CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or...
CVE-2024-5679
7.1 High
-
schneider electric ecostruxure it gateway
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege...
CVE-2024-0865
7.8 High
-
schneider electric powerlogic p5, schneider-electric powerlogic p5 firmware +1 more
CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could
cause...
CVE-2024-5559
6.1 Medium
-
schneider electric easergy studio
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could...
CVE-2024-2747
7.8 High
-
schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 more
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability...
CVE-2024-37040
5.4 Medium
-
schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 more
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the...
CVE-2024-37039
5.9 Medium
-
schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 more
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated...
CVE-2024-37038
7.5 High
-
schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 more
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path
Traversal’)...
CVE-2024-37037
8.1 High
-
schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 more
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass...
CVE-2024-37036
9.8 Critical
-
schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 more
CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the
device...
CVE-2024-5560
5.3 Medium
-
schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 more
CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause...
CVE-2024-5557
4.5 Medium
-
schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 more
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could
cause...
CVE-2024-5558
6.4 Medium
- Show olderLoading…