Skip to contentSchneider-electric vulnerabilities
Products
Show 140 moreShow less
Newest
- schneider electric ritto wiser doorA CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the...CVE-2021-227838.8 High
- schneider electric smartconnect, schneider-electric scl series 1029 ups firmware, scl series 1030 ups firmware +6 more +8 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an...CVE-2022-22806EPSS 12.5%9.8 Critical
- schneider electric smartconnect, schneider-electric scl series 1029 ups firmware, scl series 1030 ups firmware +6 more +8 moreA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...CVE-2022-22805EPSS 11.9%9.8 Critical
- schneider electric apc smart-ups, smartconnect, schneider-electric scl series 1029 ups firmware +32 more +34 moreA CWE-287: Improper Authentication vulnerability exists that could cause an attacker to...CVE-2022-07159.1 Critical
- schneider-electric interactive graphical scada system data collectorA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...CVE-2021-22824EPSS 14.2%7.5 High
- schneider-electric interactive graphical scada system data collectorA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...CVE-2021-22823EPSS 21.4%9.1 Critical
- schneider-electric modicon m218 firmwareA CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service...CVE-2021-228007.5 High
- schneider-electric interactive graphical scada system data collectorA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...CVE-2021-228059.1 Critical
- schneider-electric interactive graphical scada system data collectorA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that...CVE-2021-228047.5 High
- schneider-electric interactive graphical scada system data collectorA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead...CVE-2021-228039.8 Critical
- schneider-electric interactive graphical scada system data collectorA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...CVE-2021-22802EPSS 20.2%9.8 Critical
- schneider-electric connexium network managerA CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary...CVE-2021-228019.8 Critical
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data...CVE-2021-228067.5 High
- schneider-electric conext combox firmwareA CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive...CVE-2021-227987.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an...CVE-2021-227887.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of...CVE-2021-227877.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-200: Information Exposure vulnerability exists that could cause sensitive information of...CVE-2021-227857.5 High
- schneider-electric c-gate serverA CWE-287: Improper Authentication vulnerability exists that could allow remote code execution...CVE-2021-227967.8 High
- schneider-electric c-bus toolkitA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2021-227488.8 High
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-243217.5 High
- schneider-electric vijeo designer, hmibmiea5dd1001 firmware, hmibmiea5dd100a firmware +34 more +36 moreA CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized...CVE-2021-228177.8 High
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in...CVE-2022-243205.9 Medium
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in...CVE-2022-243195.9 Medium
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted...CVE-2022-243187.5 High
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2022-228126.1 Medium
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to...CVE-2022-228118.1 High
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2022-228109.8 Critical
- schneider-electric easergy p141 firmware, easergy p142 firmware, easergy p143 firmware +30 more +32 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the...CVE-2022-228139.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-862: Missing Authorization vulnerability exists that could cause information exposure when...CVE-2022-243177.5 High
- schneider-electric interactive graphical scada system data serverA CWE-665: Improper Initialization vulnerability exists that could cause information exposure...CVE-2022-243167.5 High
- schneider-electric interactive graphical scada system data serverA CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an...CVE-2022-24315EPSS 19.3%7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially...CVE-2022-24314EPSS 18.2%7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...CVE-2022-24313EPSS 44.6%9.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that...CVE-2022-243129.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that...CVE-2022-243119.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer...CVE-2022-243109.8 Critical
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow...CVE-2022-228095.3 Medium
- schneider-electric hmibscea53d1edb firmware, hmibscea53d1edl firmware, hmibscea53d1edm firmware +4 more +6 moreA CWE-942: Permissive Cross-domain Policy with Untrusted Domains vulnerability exists that could...CVE-2022-228088.8 High
- schneider-electric hmibscea53d1edb firmware, hmibscea53d1edl firmware, hmibscea53d1edm firmware +4 more +6 moreA CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...CVE-2022-228077.4 High
- schneider-electric ecostruxure power monitoring expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2022-228045.4 Medium
- schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated...CVE-2022-227278.8 High
- schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the...CVE-2022-227266.5 Medium
- schneider-electric easergy p3 firmwareA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a...CVE-2022-227258.8 High
- schneider-electric modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware +3 more +5 moreA CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of...CVE-2022-227247.5 High
- schneider-electric 140cpu65 firmware, 140noc78000 firmware, 140noe77111 firmware +7 more +9 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that...CVE-2020-75348.8 High
- schneider-electric easergy p5 firmwareA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a...CVE-2022-227238.8 High
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information...CVE-2022-227227.5 High
- schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting...CVE-2021-228155.3 Medium
- schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228146.1 Medium
- schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228136.1 Medium
- Show moreLoading…