Skip to contentSchneider-electric vulnerabilities
Products
Show 140 moreShow less
Newest
- schneider-electric powerlogic ion7400 firmware, powerlogic ion7650 firmware, powerlogic ion8300 firmware +7 more +9 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic...CVE-2021-227037.5 High
- schneider-electric powerlogic ion7300 firmware, powerlogic ion7400 firmware, powerlogic ion7650 firmware +9 more +11 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic...CVE-2021-227027.5 High
- schneider-electric ecostruxure power build - rapsodyA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the...CVE-2021-226987.8 High
- schneider-electric ecostruxure power build - rapsodyA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the...CVE-2021-226977.8 High
- schneider-electric pro-face blue, ecostruxure operator terminal expert +1 moreA CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert...CVE-2020-282219.8 Critical
- schneider-electric unity pro, ecostruxure control expert +1 moreA CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all...CVE-2020-75608.6 High
- schneider-electric 140cpu65150 firmware, 140noc78000 firmware, 140noc78100 firmware +16 more +18 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web...CVE-2020-75495.3 Medium
- schneider-electric modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware +13 more +15 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75437.5 High
- schneider-electric 140cpu65150 firmware, modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware +17 more +19 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75427.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78000 firmware +17 more +19 moreA CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon...CVE-2020-75415.3 Medium
- schneider-electric 140cpu65150 firmware, 140cpu65160 firmware, 140noc77101 firmware +20 more +22 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on...CVE-2020-75409.8 Critical
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78000 firmware +17 more +19 moreA CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web...CVE-2020-75397.5 High
- schneider-electric modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware +16 more +18 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75377.5 High
- schneider-electric 140cpu65150 firmware, 140cpu65160 firmware, 140noc77101 firmware +18 more +20 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'...CVE-2020-75357.5 High
- schneider-electric modicon m258 firmware, somachine, somachine motion +2 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2020-282206.8 Medium
- schneider-electric ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 moreA CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA...CVE-2020-282197.8 High
- schneider-electric easergy t300 firmwareA CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy...CVE-2020-282186.5 Medium
- schneider-electric easergy t300 firmwareA CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2...CVE-2020-282177.5 High
- schneider-electric easergy t300 firmwareA CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2...CVE-2020-282167.5 High
- schneider-electric easergy t300 firmwareA CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older),...CVE-2020-282159.8 Critical
- schneider-electric modicon m221 firmwareA CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 ...CVE-2020-282145.5 Medium
- schneider-electric bmxnoe0100 firmware, bmxnoe0110 firmware, bmxnor0200h firmware +7 more +9 moreA CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75367.5 High
- schneider-electric 140cpu65260 firmware, 140noc77101 firmware, 140noc78000 firmware +13 more +15 moreA CWE-255: Credentials Management vulnerability exists in Web Server on Modicon M340, Modicon...CVE-2020-75339.8 Critical
- schneider-electric acti9 powertag link firmware, acti9 powertag link hd firmware, acti9 smartlink el b firmware +4 more +6 moreA CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and...CVE-2020-75489.8 Critical
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, power manager +2 more +4 moreA CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power...CVE-2020-75478.8 High
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, power manager +2 more +4 moreA CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in...CVE-2020-75465.4 Medium
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, power manager +2 more +4 moreA CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power...CVE-2020-75457.2 High
- schneider-electric enterprise server installerA CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation...CVE-2020-282097.0 High
- schneider-electric modicon m221 firmwareA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in...CVE-2020-75684.3 Medium
- schneider-electric modicon m221 firmwareA CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all...CVE-2020-75675.7 Medium
- schneider-electric modicon m221 firmwareA CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all...CVE-2020-75667.3 High
- schneider-electric modicon m221 firmwareA CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references,...CVE-2020-75657.3 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...CVE-2020-75587.8 High
- schneider-electric interactive graphical scada systemA CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...CVE-2020-75577.8 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...CVE-2020-75567.8 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...CVE-2020-75557.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2020-75547.8 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...CVE-2020-75537.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2020-75527.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2020-75517.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2020-75507.8 High
- schneider-electric operator terminal expert runtimeA CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal...CVE-2020-75447.8 High
- schneider-electric ecostruxure control expertA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...CVE-2020-75597.5 High
- schneider-electric ecostruxure control expertA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC...CVE-2020-75387.5 High
- schneider-electric ecostruxure control expertA CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on...CVE-2020-282138.8 High
- schneider-electric ecostruxure control expertA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC...CVE-2020-282129.8 Critical
- schneider-electric ecostruxure control expertA CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control...CVE-2020-282117.8 High
- schneider-electric webreportsA CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation...CVE-2020-75736.5 Medium
- schneider-electric webreportsA CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in...CVE-2020-75728.8 High
- schneider-electric webreportsA CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site...CVE-2020-75715.4 Medium
- Show moreLoading…