Skip to contentSchneider-electric vulnerabilities
Products
Show 140 moreShow less
Newest
- schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228126.1 Medium
- schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228116.1 Medium
- schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228106.1 Medium
- schneider-electric guiconA CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure...CVE-2021-228095.5 Medium
- schneider-electric guiconA CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a...CVE-2021-228087.8 High
- schneider-electric guiconA CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution...CVE-2021-228077.8 High
- schneider-electric software updateA CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from...CVE-2021-227993.8 Low
- schneider-electric scadapack 312e firmware, scadapack 313e firmware, scadapack 314e firmware +6 more +8 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2021-228167.5 High
- schneider-electric rack power distribution unit with network management card 2 firmware, rack power distribution unit with network management card 3 firmware +1 moreA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...CVE-2021-228258.0 High
- schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code...CVE-2021-228278.8 High
- schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code...CVE-2021-228268.8 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-79 Improper Neutralization of Input During Web Page Generation (?Cross-site Scripting?)...CVE-2021-228226.1 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station...CVE-2021-228218.6 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to...CVE-2021-228209.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...CVE-2021-228194.3 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2021-228187.5 High
- schneider-electric evb1a firmware, evc1s22p4 firmware, evc1s7p4 firmware +3 more +5 moreA CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to...CVE-2021-227258.8 High
- schneider-electric evb1a firmware, evc1s22p4 firmware, evc1s7p4 firmware +3 more +5 moreA CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to...CVE-2021-227248.8 High
- schneider-electric ecostruxure machine expert, vijeo designer +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in...CVE-2021-227049.1 Critical
- schneider-electric accusine pcsn active harmonic filter firmware, accusine pcsp pfvp firmware +1 moreA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in...CVE-2021-227937.2 High
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the...CVE-2021-227927.5 High
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon...CVE-2021-227916.5 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon...CVE-2021-227906.5 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2021-227896.5 Medium
- schneider-electric gp-pro exA CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior...CVE-2021-227757.8 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-227747.5 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...CVE-2021-227736.5 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-227309.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...CVE-2021-227299.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...CVE-2021-227286.5 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...CVE-2021-227279.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-227268.1 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting)...CVE-2021-227236.1 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site...CVE-2021-227225.4 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...CVE-2021-227215.3 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City ...CVE-2021-227087.2 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-22707EPSS 64.6%9.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-227066.1 Medium
- schneider-electric t200e firmware, t200i firmware, t200p firmware +2 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 (...CVE-2021-227729.8 Critical
- schneider-electric c-bus toolkitA CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1...CVE-2021-22784EPSS 12.1%5.7 Medium
- schneider-electric sosafe configurableA CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution...CVE-2021-227777.8 High
- schneider-electric easergy t300 firmwareA CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in...CVE-2021-227717.3 High
- schneider-electric easergy t300 firmwareA CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and...CVE-2021-227706.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreMissing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227825.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227815.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227807.1 High
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +29 more +31 moreAuthentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227799.1 Critical
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227787.1 High
- schneider-electric easergy t300 firmwareA CWE-269: Improper Privilege Management vulnerability exists in EnerlinÕX ComÕX versions prior...CVE-2021-227694.3 Medium
- schneider-electric powerlogic egx100 firmware, powerlogic egx300 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** A CWE-20: Improper Input Validation vulnerability exists in...CVE-2021-227689.8 Critical
- Show moreLoading…