Skip to contentSchneider-electric vulnerabilities
Products
Show 140 moreShow less
Newest
- schneider-electric webreportsA CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored...CVE-2020-75705.4 Medium
- schneider-electric webreportsA CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure...CVE-2020-75698.8 High
- schneider-electric ecostruxure building operationA CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)...CVE-2020-282106.1 Medium
- schneider-electric easergy t300 firmwareA CWE-284: Improper Access Control vulnerability exists in Easergy T300 (with firmware 2.7 and...CVE-2020-75619.8 Critical
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +17 more +19 moreA CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon...CVE-2020-75628.1 High
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +17 more +19 moreA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...CVE-2020-75648.8 High
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +17 more +19 moreA CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon...CVE-2020-75638.8 High
- schneider-electric scadapack x70 security administratorA CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security...CVE-2020-75327.8 High
- schneider-electric scadapack 7x remote connectA CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574...CVE-2020-75317.8 High
- schneider-electric scadapack 7x remote connectA CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574...CVE-2020-75308.8 High
- schneider-electric scadapack 7x remote connectA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal')...CVE-2020-75295.5 Medium
- schneider-electric scadapack 7x remote connectA CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect ...CVE-2020-75287.8 High
- schneider-electric somoveIncorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause...CVE-2020-75277.8 High
- schneider-electric spacelynk firmware, wiser for knx firmware +1 moreImproper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware...CVE-2020-75257.5 High
- schneider-electric modicon m218 firmwareOut-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior)...CVE-2020-75247.5 High
- schneider-electric modbus serial driver, modbus driver suite +1 moreImproper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver ...CVE-2020-75237.8 High
- schneider-electric apc easy ups online softwareImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability...CVE-2020-75229.8 Critical
- schneider-electric apc easy ups online softwareImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability...CVE-2020-75219.8 Critical
- schneider-electric easergy builderA CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2...CVE-2020-75197.5 High
- schneider-electric easergy builderA CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and...CVE-2020-75187.5 High
- schneider-electric easergy builderA CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder ...CVE-2020-75175.5 Medium
- schneider-electric easergy builderA CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy...CVE-2020-75167.8 High
- schneider-electric easergy builderA CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in...CVE-2020-75157.8 High
- schneider-electric easergy builderA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy...CVE-2020-75147.8 High
- schneider-electric tricon tcm 4351 firmware, tricon tcm 4351a firmware, tricon tcm 4351b firmware +4 more +6 more**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon...CVE-2020-74917.5 High
- schneider-electric software update utilityA CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider...CVE-2020-75204.7 Medium
- schneider-electric easergy t300 firmwareA CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 ...CVE-2020-75137.5 High
- schneider-electric easergy t300 firmwareA CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability...CVE-2020-75129.8 Critical
- schneider-electric easergy t300 firmwareA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 ...CVE-2020-75117.5 High
- schneider-electric easergy t300 firmwareA CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and...CVE-2020-75107.5 High
- schneider-electric easergy t300 firmwareA CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware...CVE-2020-75097.2 High
- schneider-electric easergy t300 firmwareA CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in...CVE-2020-75089.8 Critical
- schneider-electric easergy t300 firmwareA CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware...CVE-2020-75077.5 High
- schneider-electric easergy t300 firmwareA CWE-538: File and Directory Information Exposure vulnerability exists in Easergy T300 (Firmware...CVE-2020-75067.5 High
- schneider-electric easergy t300 firmwareA CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware...CVE-2020-75057.2 High
- schneider-electric easergy t300 firmwareA CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2...CVE-2020-75045.3 Medium
- schneider-electric easergy t300 firmwareA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware...CVE-2020-75038.8 High
- schneider-electric modicon m218 firmwareA CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware...CVE-2020-75027.5 High
- schneider-electric vijeo designerA CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1...CVE-2020-75018.8 High
- schneider-electric mtn6260-0310 firmware, mtn6260-0315 firmware, mtn6260-0410 firmware +3 more +5 moreA CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...CVE-2020-75009.8 Critical
- schneider-electric mtn6260-0310 firmware, mtn6260-0315 firmware, mtn6260-0410 firmware +3 more +5 moreA CWE-284:Improper Access Control vulnerability exists in U.motion Servers and Touch Panels ...CVE-2020-74996.5 Medium
- schneider-electric os loader, unity loader +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader...CVE-2020-74989.8 Critical
- schneider-electric ecostruxure operator terminal expertA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2020-74979.8 Critical
- schneider-electric ecostruxure operator terminal expertA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2020-74955.5 Medium
- schneider-electric ecostruxure operator terminal expertA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2020-74947.8 High
- schneider-electric ecostruxure operator terminal expertA CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...CVE-2020-74937.8 High
- schneider-electric gp-pro ex firmwareA CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100...CVE-2020-74926.5 Medium
- fazecast jserialcomm, schneider-electric ecostruxure it gateway +1 moreIn Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element...CVE-2020-106267.8 High
- schneider-electric ecostruxure machine expert, modicon m218 firmware, modicon m241 firmware +4 more +6 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak...CVE-2020-74887.5 High
- schneider-electric ecostruxure machine expert, modicon m218 firmware, modicon m241 firmware +4 more +6 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow...CVE-2020-74879.8 Critical
- Show moreLoading…