Skip to contentSchneider-electric vulnerabilities
Products
Show 140 moreShow less
Newest
- schneider electric ecostruxure power commissionA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-02236.5 Medium
- schneider electric legacy modicon quantum/premium, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +50 more +52 moreA CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial...CVE-2022-373017.5 High
- schneider electric modicon m340 cpus, modicon m340 x80 ethernet communication modules: bmxnoe0100 (h) bmxnoe0110 (h) bmxnor0200h rtu, schneider-electric modicon m340 bmxnoe0100 firmware +13 more +15 moreA CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of...CVE-2022-02227.5 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’)...CVE-2022-416717.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-416707.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the...CVE-2022-416697.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local...CVE-2022-416687.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-416677.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows...CVE-2022-416667.0 High
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-373025.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu +35 more +37 moreA CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that...CVE-2022-373009.8 Critical
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of...CVE-2022-347655.5 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-347645.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause...CVE-2022-347635.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-347625.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of...CVE-2022-347617.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could...CVE-2022-347607.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the...CVE-2022-347597.5 High
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog...CVE-2022-347585.1 Medium
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak...CVE-2022-347576.7 Medium
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...CVE-2022-347568.8 High
- schneider electric acti9 powertag link c, schneider-electric acti9 powertag link c \(a9xelc10-a\) firmware, acti9 powertag link c \(a9xelc10-b\) firmware +2 moreA CWE-269: Improper Privilege Management vulnerability exists that could allow elevated...CVE-2022-347546.8 Medium
- schneider electric spacelogic c-bus home controller, schneider-electric spacelogic c-bus home controller firmware +1 moreA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command...CVE-2022-34753EPSS 71.4%8.8 High
- schneider electric geo scada mobileA CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be...CVE-2022-325304.8 Medium
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over...CVE-2022-302388.3 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow...CVE-2022-302378.2 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow...CVE-2022-302368.2 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2022-302358.6 High
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to...CVE-2022-302349.4 Critical
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-20: Improper Input Validation vulnerability exists that could allow the product to be...CVE-2022-302336.5 Medium
- schneider electric power logic ion setup, schneider-electric powerlogic ion setup firmware +1 moreA CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code...CVE-2022-302328.0 High
- att xmill, schneider-electric ecostruxure control expert, ecostruxure process expert +1 more +3 more** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression...CVE-2022-265079.8 Critical
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...CVE-2021-300666.8 Medium
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...CVE-2021-300657.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...CVE-2021-300649.8 Critical
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +8 more +10 moreOn Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon...CVE-2021-300637.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +8 more +10 moreOn Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon...CVE-2021-300627.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...CVE-2021-300616.8 Medium
- schneider electric scadapack workbenchA CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...CVE-2022-02215.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, scadapack remoteconnect for x70 +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal)...CVE-2021-22797EPSS 26.1%7.8 High
- schneider electric struxureware data center expertA CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection...CVE-2021-227959.1 Critical
- schneider electric struxureware data center expertA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2021-227949.1 Critical
- schneider-electric software update, schneider electric software update (sesu) – sut service component +1 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker...CVE-2019-68347.3 High
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic KeyCVE-2020-251805.3 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Unprotected Storage of CredentialsCVE-2020-251847.8 High
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Relative Path TraversalCVE-2020-251769.1 Critical
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path ElementCVE-2020-251826.7 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive InformationCVE-2020-251787.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-243235.3 Medium
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-243225.3 Medium
- Show moreLoading…