Skip to contentSchneider-electric vulnerabilities
Products
Show 140 moreShow less
Newest
- schneider electric evlink home smart, schneider-electric evlink home firmware +1 moreCWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH
interface...CVE-2024-53136.5 Medium
- schneider electric modicon m340, network module, modicon m340, ethernet tcp/ip bmxnoe0110, network module, modicon m340, modbus/tcp bmxnoe0100 +5 more +7 moreCWE-552: Files or Directories Accessible to External Parties vulnerability exists which may...CVE-2024-50566.5 Medium
- schneider electric ecostruxure power design - ecodial, schneider-electric ecostruxure power monitoring expert +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code...CVE-2024-22297.8 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +1 more +3 moreCWE-552: Files or Directories Accessible to External Parties vulnerability exists that could...CVE-2024-20527.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized...CVE-2023-279757.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +46 more +48 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication...CVE-2023-64088.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access...CVE-2023-64097.7 High
- schneider electric easergy studioA CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker...CVE-2023-70327.8 High
- schneider electric easy ups online monitoring softwareA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2023-64075.3 Medium
- schneider electric trio e-series ethernet data radio, trio j-series ethernet data radio, trio q-series ethernet data radio +16 more +18 moreA CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a...CVE-2023-56306.5 Medium
- schneider electric trio e-series ethernet data radio, trio j-series ethernet data radio, trio q-series ethernet data radio +16 more +18 moreA CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could...CVE-2023-56298.2 High
- schneider electric galaxy vl, galaxy vs, schneider-electric galaxy vl firmware +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2023-60325.3 Medium
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) – advanced reporting and dashboards module, ecostruxure power scada operation (pso) - advanced reporting and dashboards module +1 more +3 moreA CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)...CVE-2023-59876.1 Medium
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) – advanced reporting and dashboards module, ecostruxure power scada operation (pso) - advanced reporting and dashboards module +1 more +3 moreA CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an...CVE-2023-59868.2 High
- schneider electric ion8650, ion8800, schneider-electric ion8650 firmware +1 more +3 moreA CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability
exists that...CVE-2023-59854.8 Medium
- schneider electric ion8650, ion8800, schneider-electric ion8650 firmware +1 more +3 moreA CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow...CVE-2023-59847.2 High
- schneider electric ecostruxure power monitoring expert, ecostruxure power operation (epo) with advanced reports, ecostruxure power scada operation with advanced reports +1 more +3 moreA?CWE-502:?Deserialization of untrusted data?vulnerability exists?that could allow an attacker...CVE-2023-53919.8 Critical
- schneider electric c-bus toolkit, schneider-electric spacelogic c-bus toolkit +1 moreA?CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2023-5399EPSS 36.4%9.8 Critical
- schneider electric c-bus toolkitA?CWE-269: Improper Privilege Management vulnerability exists?that could cause?a local privilege...CVE-2023-54029.8 Critical
- schneider electric igss update service (igssupdateservice.exe), schneider-electric interactive graphical scada system +1 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update...CVE-2023-45167.8 High
- schneider electric gp-pro ex wingp for ipc, gp-pro ex wingp for pc/at, schneider-electric pro-face gp-pro ex +2 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory
Buffer vulnerability...CVE-2023-39535.3 Medium
- schneider electric accutech managerA CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability...CVE-2023-294147.8 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-371996.8 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-371986.8 Medium
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
(...CVE-2023-371978.8 High
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL...CVE-2023-371968.8 High
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-129: Improper Validation of Array Index vulnerability exists that could cause local...CVE-2023-25707.0 High
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service,...CVE-2023-25697.8 High
- schneider electric igss dashboard (dashboard.exe), schneider-electric igss dashboard +1 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...CVE-2023-3001EPSS 31.9%7.8 High
- schneider electric ecostruxure™ operator terminal expert, pro-face blue, schneider-electric ecostruxure operator terminal expert +2 moreA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-10497.8 High
- schneider electric legacy ion products, powerlogic ion7400, powerlogic ion8650 +8 more +10 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause...CVE-2022-466808.8 High
- schneider electric opc factory server (ofs), schneider-electric opc factory server +1 moreA CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that
could...CVE-2023-21615.0 Medium
- schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +12 more +14 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that...CVE-2023-256206.5 Medium
- schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +11 more +13 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could...CVE-2023-256197.5 High
- schneider electric powerlogic hdpm6000, schneider-electric powerlogic hdpm6000 firmware +1 moreA CWE-129: Improper validation of an array index vulnerability exists where a specially...CVE-2023-280049.8 Critical
- schneider electric conext gateway, insightfacility, insighthome +3 more +5 moreA CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated...CVE-2023-294107.2 High
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...CVE-2023-294137.5 High
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote...CVE-2023-294129.8 Critical
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow...CVE-2023-294119.8 Critical
- schneider electric ecostruxure power monitoring expertA CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker...CVE-2023-280036.7 Medium
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...CVE-2023-255555.6 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255536.1 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255516.1 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255507.2 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255497.2 High
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command...CVE-2023-255547.8 High
- schneider electric struxureware data center expertA CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized...CVE-2023-255528.1 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow access to device...CVE-2023-255488.8 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution...CVE-2023-255478.8 High
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that...CVE-2022-433786.5 Medium
- Show moreLoading…