Skip to content

Schneider-electric vulnerabilities

Products

Show 140 moreShow less

Newest

aveva clearscada, schneider electric scada expert clearscada +1 moreSchneider Electric SCADA Expert ClearSCADA Cryptographic IssuesCVE-2014-54136.4 September 18, 2014
aveva clearscada, schneider electric scada expert clearscada +1 moreSchneider Electric SCADA Expert ClearSCADA Improper AuthenticationCVE-2014-54126.4 September 18, 2014
aveva clearscada, schneider electric scada expert clearscada +1 moreSchneider Electric SCADA Expert ClearSCADA Cross-site ScriptingCVE-2014-54114.9 September 18, 2014
schneider electric vampsetSchneider Electric VAMPSET Stack-based Buffer OverflowCVE-2014-54074.1 September 15, 2014
schneider electric opc factory server (ofs), schneider-electric opc factory server tlxcdlfofs, opc factory server tlxcdltofs +3 more +5 moreSchneider Electric OPC Factory Server Buffer OverflowCVE-2014-07895.0 April 4, 2014
schneider-electric modbus serial driver, concept, modbuscommdtm sl +9 more +11 moreMultiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver...CVE-2013-0662Public exploitEPSS 22.2%9.3 HighMarch 28, 2014
schneider electric tlxcdlfofs33, tlxcdltofs33, tlxcdluofs33 +8 more +10 moreSchneider Electric OFS Stack Buffer OverflowCVE-2014-07746.8 February 28, 2014
schneider electric floating license managerSchneider Electric Floating License Manager Unquoted Search Path or ElementCVE-2014-07596.9 February 28, 2014
schneider-electric citectscada, powerlogic scada, struxureware powerscada expert +1 more +3 moreSchneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1...CVE-2013-28247.8 HighFebruary 26, 2014
schneider-electric telvent sage 3030 firmwareThe Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500...CVE-2013-61435.0 MediumJanuary 31, 2014
schneider-electric tburjr900, tburjr900 firmware +1 moreSchneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3...CVE-2013-27829.3 HighAugust 28, 2013
schneider-electric citectscada, powerlogic scada, vijeo citect +2 moreSchneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic...CVE-2013-27966.9 MediumAugust 9, 2013
mitsubishi-automation mitsubishi mx component, schneider-electric citectfacilities, citectscada +2 moreMultiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in...CVE-2013-3075Public exploitEPSS 10.8%10.0 HighApril 19, 2013
schneider-electric micom s1 studioThe installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for...CVE-2013-06876.6 MediumApril 18, 2013
schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +9 more +11 more** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial...CVE-2013-2763Disputed5.0 MediumApril 4, 2013
schneider-electric magelis xbt hmiThe Schneider Electric Magelis XBT HMI controller has a default password for authentication of...CVE-2013-276210.0 HighApril 4, 2013
schneider-electric modicon m340The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated...CVE-2013-27614.0 MediumApril 4, 2013
schneider-electric modicon m340, modicon premium, modicon quantum plc +2 moreThe FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340...CVE-2013-06648.5 HighApril 4, 2013
schneider-electric modicon m340, modicon premium, modicon quantum plc +2 moreCross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111,...CVE-2013-0663Public exploit6.8 MediumApril 4, 2013
schneider-electric accutech managerHeap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1...CVE-2013-0658Public exploitEPSS 21.5%10.0 HighFebruary 15, 2013
schneider-electric interactive graphical scada systemStack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10...CVE-2013-0657Public exploitEPSS 21.3%10.0 HighJanuary 21, 2013
schneider-electric software update utilityThe client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure...CVE-2013-06559.3 HighJanuary 21, 2013
mitsubishi-automation mx4 scada, schneider-electric citectscada +1 moreBuffer overflow in an unspecified third-party component in the Batch module for Schneider...CVE-2011-51634.6 MediumSeptember 15, 2012
schneider-electric kerweb, kerwin +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and...CVE-2012-1990Public exploit4.3 MediumMay 22, 2012
schneider-electric modicon quantum plcSchneider Electric Modicon Quantum PLC does not perform authentication between the Unity software...CVE-2012-09319.8 CriticalJanuary 28, 2012
schneider-electric modicon quantum plcCross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote...CVE-2012-09306.1 MediumJanuary 28, 2012
schneider-electric modicon quantum plcMultiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to...CVE-2012-09297.5 HighJanuary 28, 2012
schneider-electric quantum ethernet module 140noe77100, quantum ethernet module 140noe77101, quantum ethernet module 140noe77111 +2 moreThe modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771...CVE-2011-486110.0 HighDecember 17, 2011
schneider-electric quantum ethernet module 140noe77100, quantum ethernet module 140noe77101, quantum ethernet module 140noe77111 +2 moreThe ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771...CVE-2011-486010.0 HighDecember 17, 2011
schneider-electric m340 ethernet module bmxnoe0100, m340 ethernet module bmxnoe0110, m340 ethernet module bmxp342020 +18 more +20 moreThe Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65*...CVE-2011-485910.0 HighDecember 17, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreDirectory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier,...CVE-2011-40365.0 MediumDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreCross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier,...CVE-2011-40354.3 MediumDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreBuffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo...CVE-2011-4034Public exploitEPSS 13.4%9.3 HighDecember 2, 2011
schneider-electric citecthistorian, vijeo historian, citectscada reports +2 moreBuffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo...CVE-2011-40334.3 MediumDecember 2, 2011
schneider-electric monitor pro, opc factory server, pl7 pro +3 more +5 moreBuffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6...CVE-2011-33307.2 HighNovember 4, 2011
aveva clearscada, schneider-electric scx 67, scx 68 +2 moreCross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009...CVE-2011-31444.3 MediumAugust 16, 2011
aveva clearscada, schneider-electric scx 67, scx 68 +2 moreUse-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3...CVE-2011-314310.0 HighAugust 16, 2011