Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
10 results · Clear filters · Feed
-
High max 8.8
EcoStruxure™ Power Operation
Schneider Electric is aware of multiple vulnerabilities disclosed in PostgreSQL. Many vendors, including Schneider Electric, use PostgreSQL in their offers. PostgreSQL is a database server that is used as a data store for multiple products. Schneider Electric…
first Jul 8, 2025 -
Critical max 9.8
EcoStruxure™ Foxboro DCS Advisor
Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services. The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure…
-
Critical max 10.0
Galaxy VS, Galaxy VL, Galaxy VXL
Schneider Electric is aware of a vulnerability disclosed on the Erlang/OTP's SSH Server component used Schneider Electric Galaxy VS, VL, and VXL.Many vendors, including Schneider Electric, embed the Erlang/OTP's SSH Server in their offers.The Galaxy VS, Galax…
first May 13, 2025 -
Medium max 6.9
System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…
-
Critical max 10.0
ProLeiT Plant iT/Brewmaxx
Schneider Electric is aware of a vulnerability in Redis open-source database, affecting its Plant iT product. The Plant iT/Brewmaxx product is an object-oriented and PLC-based process control system with integrated Manufacturing Execution System functionality…
-
Unscored max 10.0
Apache Log4j Vulnerabilities (Log4Shell)
Schneider Electric is aware of the vulnerabilities impacting Apache Log4j, including CVE-2021-44228, also known as Log4Shell. Our cybersecurity team is actively investigating the impact of the vulnerability on Schneider Electric offers and will continuously u…
first Dec 13, 2021 -
Unscored max 9.8
Treck TCP/IP Vulnerabilities (Ripple20)
Schneider Electric is aware of multiple vulnerabilities affecting Treck Inc.’s embedded TCP/IP stack, collectively known as Ripple20, which Treck disclosed publicly on June 16. The vulnerabilities range in severity and therefore have varying levels of risk. S…
first Jun 23, 2020 -
Critical max 10.0
Conext™ Advisor & Conext™ Control V2
Schneider Electric is aware of multiple Microsoft Windows vulnerabilities in its Schneider Conext™ Advisor 2 & Conext™ Control V2 products. The Conext™ Advisor 2 is a web portal with an efficient, task-oriented interface for managing and optimizing the perfor…
-
Unscored max 9.8
APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices
Schneider Electric became aware of multiple vulnerabilities affecting Treck Inc.'s embedded TCP/IP stack, collectively known as Ripple20, which Treck publicly disclosed on June 16, 2020. Schneider Electric is also aware of a proof of concept published by JSOF…
first Jun 22, 2020 -
High max 9.8
Security Notification - U.motion Builder software
Schneider Electric is aware of an exploit that targets Schneider Electric’s U.motion Builder software. It is imperative customers cease using U.motion Builder software and remove it from their systems immediately.
first Apr 5, 2018