Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
50 results · Clear filters · Feed
-
Critical max 9.2SEVD-2026-251-04 1 CVE
Incorrect Implementation of Authentication Algorithm vulnerability on Modicon M580 and Modicon M580 Safety
Schneider Electric is aware of a vulnerability in its Modicon M580 and Modicon M580 Safety controllers. The Modicon M580 is an Ethernet-based Programmable Automation Controller (ePAC) designed for industrial digital transformation. Failure to apply the remedi…
-
Critical max 7.5
Multiple Vulnerabilities in Modicon Controller Products
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controller products. The [Modicon Programmable Automation controllers](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/) are used for complex netw…
first May 14, 2019 -
Critical max 9.0SEVD-2026-104-02 1 CVE
Third-Party vulnerability on Modicon Networking Managed Switches
Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product. The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devices, network management, enhanced cyber security an…
-
Critical max 10.0
Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx
Schneider Electric is aware of multiple vulnerabilities in Redis open-source database, affecting its Plant iT product. The [Plant iT/Brewmaxx](https://www.proleit.com/plant-it/) product is an object-oriented and PLC-based process control system with integrate…
first Jan 13, 2026 -
Critical max 9.3SEVD-2026-041-01 1 CVE
Improper Check for Unusual or Exceptional Conditions on Multiple Products
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to a…
-
Critical max 9.8
EcoStruxure™ Foxboro DCS Advisor
Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services. The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure…
-
Critical max 9.1
ISaGRAF Vulnerabilities in IEC 61131-3 Programming and Engineering Tools
On June 8, 2021, Rockwell Automation disclosed multiple vulnerabilities in its ISaGRAF Workbench and ISaGRAF Runtime products. Multiple vendors, including Schneider Electric, embed ISaGRAF in their offers. ISaGRAF Workbench is used to program applications for…
first Jun 8, 2021 -
Critical max 9.8
Modicon M241 / M251 / M258 / LMC058
Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/ products. The Mod…
first Dec 10, 2024 -
Critical max 10.0
Galaxy VS, Galaxy VL, Galaxy VXL
Schneider Electric is aware of a vulnerability disclosed on the Erlang/OTP's SSH Server component used Schneider Electric Galaxy VS, VL, and VXL.Many vendors, including Schneider Electric, embed the Erlang/OTP's SSH Server in their offers.The Galaxy VS, Galax…
first May 13, 2025 -
Critical max 9.0
BadAlloc Vulnerabilities
Schneider Electric is aware of multiple memory allocation vulnerabilities dubbed 'BadAlloc', disclosed by Microsoft on April 29, 2021. The impact of a successful exploitation of the vulnerabilities may result in denial of service, or remote code execution, de…
first Nov 9, 2021 -
Critical
Wind River VxWorks DHCP Server Vulnerability
Schneider Electric is aware of a vulnerability within the VxWorks Operating System from Wind River. Many vendors, including Schneider Electric, embed VxWorks in their offers. If successfully exploited, these vulnerabilities could result in loss of confidentia…
first Jan 14, 2025 -
Critical max 9.5SEVD-2025-189-01 6 CVEs
EcoStruxure™ IT Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ IT Data Center Expert (DCE) product. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device informa…
-
Critical
Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their communication modules. The Modicon Ethernet Programmable Automation products are controllers for industrial proce…
first Oct 13, 2020 -
Critical max 9.8SEVD-2025-070-03 1 CVE
WebHMI Component For EcoStruxure™ Power Automation System User Interface and EcoStruxure™ Microgrid Operation Large
Schneider Electric is aware of a vulnerability in its WebHMI component used in EcoStruxure™ Power Automation System User Interface product and EcoStruxure™ Microgrid Operation Large (EMO-L) solution. EcoStruxure™ Power Automation System User Interface https:/…
-
Critical max 9.8SEVD-2024-317-04 1 CVE
EcoStruxure™ IT Gateway
Customers should use appropriate methodologies when updating their systems. We strongly recommend the use of backups and evaluating the impact of the software update in a Test and Development environment or on an offline infrastructure. Contact Schneider Elec…
-
Critical max 9.8SEVD-2024-282-07 1 CVE
System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC Series and Pro-face PS5000 trusted Legacy industrial PC Series product(s). The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Seri…
-
Critical max 9.8
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, and Modicon Controllers M580 and M340
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert, and Modicon M580 and M340 control products. Failure to apply the remediations provided below may risk a bypass of access controls in place, which …
first Aug 9, 2022 -
Critical max 7.3
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ x70, and Modicon Controllers M580 and M340
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ x70, and Modicon M580 and M340 control products. These vulnerabilities pose several risks, primary among these i…
first Jul 13, 2021 -
Critical max 9.8
SAGE RTU
Schneider Electric is aware of multiple vulnerabilities in its SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform. Failure to apply …
first Jun 11, 2024 -
Critical max 9.8SEVD-2024-191-01 1 CVE
Wiser Home Controller WHC-5918A
Schneider Electric is aware of a vulnerability in its Wiser Home Controller WHC-5918A product. The Wiser Home Controller WHC-5918A, a C-Bus based home automation controller, was discontinued on December 31, 2015. Failure to apply the mitigations provided belo…
-
Critical max 9.8
Easy UPS Online Monitoring Software
Schneider Electric is aware of multiple vulnerabilities in its Easy UPS Online Monitoring Software, known as APC Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Soft…
first Apr 11, 2023 -
Critical max 9.8SEVD-2024-072-01 3 CVEs
Easergy T200 Multiple Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities in its Easergy T200 products. The Easergy T200 RTU Product Line (T200I, T200E, T200P) is a modular platform for medium voltage and low voltage public distribution network management. Note, this product h…
-
Critical max 10.0
ProLeiT Plant iT/Brewmaxx
Schneider Electric is aware of a vulnerability in Redis open-source database, affecting its Plant iT product. The Plant iT/Brewmaxx product is an object-oriented and PLC-based process control system with integrated Manufacturing Execution System functionality…
-
Critical max 9.8SEVD-2023-283-02 1 CVE
EcoStruxure Power Monitoring Expert and EcoStruxure™ Power
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive …
-
Critical max 9.8SEVD-2023-283-01 2 CVEs
SpaceLogic C-Bus Toolkit
Schneider Electric is aware of multiple vulnerabilities in its SpaceLogic C-Bus Toolkit products. The SpaceLogic C-Bus Toolkit product is an application run on a personal computer to configure and commission C-Bus installations. Failure to apply the remediati…
-
Critical max 9.8
CODESYS V3 Runtime, Development System, and Gateway Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V3 Runtime, Development System and Gateway. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities cou…
first Jan 11, 2022 -
Critical
PLC Simulator on EcoStruxure™ Control Expert and Process Expert
Schneider Electric is aware of multiple vulnerabilities in its PLC Simulator for EcoStruxure™ Control Expert product. PLC Simulator feature is part of the EcostruxureTM Control Expert and EcostruxureTM Process Expert software and it helps users to review and …
first Nov 10, 2020 -
Critical max 9.8SEVD-2023-073-02 1 CVE
PowerLogic™ HDPM6000
Schneider Electric is aware of a vulnerability in its PowerLogic™ HDPM6000 products. The PowerLogic™ HDPM6000 products are high density, multi-circuit busway and panelboard power meters. Failure to apply the mitigation provided below may risk a buffer overflo…
-
Critical max 9.1
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Geo SCADA Expert software product, formerly known as ClearSCADA. The EcoStruxure Geo SCADA Expert product is an open, flexible and scalable software for telemetry and remote SCADA solu…
first Jan 10, 2023 -
Critical max 9.8
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Server module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a SCADA system used for monitoring and controlling industrial processes. The Data Server is a modu…
first Jun 14, 2022 -
Critical max 9.8
APC Easy UPS Online Monitoring Software
Schneider Electric is aware of multiple vulnerabilities in its APC Easy UPS Online Monitoring Software. The APC Easy UPS Online Monitoring Software is used to configure and manage APC Easy UPS. Failure to apply the remediations provided below may risk remote …
first Dec 13, 2022 -
Critical max 9.8
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of a vulnerability in its Data Server module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The Data Server i…
first Apr 12, 2022 -
Critical max 8.9
APC Smart-UPS SMT, SMC, SMX, SCL, SRC, XU, XP, CSH2, SURTD, SMTL, SRT, and select SRTL Series
Schneider Electric is aware of the vulnerabilities associated with APC Smart-UPS uninterruptable power supply devices which, if compromised, may allow for potential unauthorized access and control of the device. Upon learning of these vulnerabilities, we work…
first Mar 8, 2022 -
Critical max 9.8SEVD-2022-165-06 2 CVEs
Schneider Electric C-Bus Home Automation Products
Schneider Electric is aware of multiple vulnerabilities in the Schneider Electric C-Bus Home Automation products listed below. The Schneider Electric C-Bus Home Automation products are fully integrated systems that can control and automate lighting and many o…
-
Critical max 9.4SEVD-2022-130-03 6 CVEs
Wiser Smart
Schneider Electric is aware of multiple vulnerabilities in its Wiser Smart products. The Wiser Smart [EER21000 and EER21001] products is a home automation system which reports your energy consumption and controls the most energy consuming devices. Failure to …
-
Critical
spaceLYnk, Wiser For KNX, fellerLYnk
Schneider Electric is aware of multiple vulnerabilities in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility, and simplifies building managem…
first Feb 8, 2022 -
CriticalSEVD-2022-039-01 8 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in the IGSS (Interactive Graphical SCADA System) Data Server module. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The Data Server is a mod…
-
CriticalSEVD-2021-348-02 7 CVEs
EVlink City / Parking / Smart Wallbox Charging Stations
Schneider Electric is aware of multiple vulnerabilities in its EVlink City, Parking, and Smart Wallbox products. The EVlink products are electric vehicle (EV) charging stations for private properties, semi-public car parks and on-street charging. These vulner…
-
CriticalSEVD-2021-285-03 4 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Collector module for IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS comm…
-
Critical max 10.0
Conext™ Advisor & Conext™ Control V2
Schneider Electric is aware of multiple Microsoft Windows vulnerabilities in its Schneider Conext™ Advisor 2 & Conext™ Control V2 products. The Conext™ Advisor 2 is a web portal with an efficient, task-oriented interface for managing and optimizing the perfor…