Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
50 results · Clear filters · Feed
-
Critical max 9.1SEVD-2021-257-03 2 CVEs
StruxureWare Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert product. StruxureWare Data Center Expert provides an efficient way for organizations to monitor and manage their company-wide multi-vendor physical infrastructure; …
-
Critical max 10.0
Treck HTTP Server Vulnerability on TM3 Bus Coupler Modules (V2.0)
Schneider Electric is aware of a vulnerability affecting Treck Inc.’s HTTP Server component used in the Schneider Electric TM3BC bus coupler modules. Failure to apply the mitigations provided below may risk heap-based buffer overflow, which could result in De…
first Dec 18, 2020 -
CriticalSEVD-2021-194-05 1 CVE
Easergy T200
Schneider Electric is aware of a vulnerability in its Easergy T200 RTU (Remote Terminal Unit). The Easergy T200 RTU is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the mitigations provided belo…
-
Critical max 9.8SEVD-2021-159-03 6 CVEs
PowerLogic EGX100 and PowerLogicEGX300
Schneider Electric is aware of multiple vulnerabilities in its PowerLogic EGX100 and EGX300 products. The PowerLogic EGX100 and EGX300 are communication gateway devices. Failure to apply the mitigations provided below may risk denial of service or remote code…
-
Critical
Easergy T300
Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy T300 product. Schneider Electric has worked closely with the researchers to remediate the vulnerabilities. We appreciate their col…
first Jun 9, 2020 -
CriticalSEVD-2021-130-01 1 CVE
Modicon Managed Switch
Schneider Electric is aware of a vulnerability in its Modicon Managed Switch products. The Modicon Managed Switch products are designed for the special requirements of industrial automation. The devices allow users to set up switched Industrial Ethernet netwo…
-
CriticalSEVD-2021-068-02 1 CVE
PowerLogic ION7400 / PM8000 / ION9000 Power Meters
Customers should use appropriate methodologies when applying these upgrades to their devices. We strongly recommend evaluating the impact of these updates in a test and development environment prior to deployment. Contact Schneider Electric's Customer Care Ce…
-
Critical
Wibu-Systems CodeMeter Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed by Wibu-Systems in the CodeMeter licensing manager product which is used by some Schneider Electric and Eurotherm offers. Failure to apply the remediations provided below may risk various types…
first Oct 13, 2020 -
Critical
Easergy T300
Schneider Electric is aware of a vulnerability in its Easergy T300 RTU (Remote Terminal Unit). The Easergy T300 is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the remediation provided below ma…
first Nov 10, 2020 -
CriticalSEVD-2020-224-04 2 CVEs
APC Easy UPS On-Line Software
Schneider Electric is aware of multiple vulnerabilities in the APC Easy UPS On-Line Software, which may lead to the uploading of executable files to non-specified directories by an unauthorized user.