Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
152 results · Clear filters · Feed
-
High max 8.6SEVD-2026-286-02 1 CVE
SAGE RTU
Schneider Electric is aware of a vulnerability in its SAGE RTU products. The SAGE RTU products are a line of devices designed for substation data acquisition and control. Failure to apply the mitigations provided below may enable a privileged user to install …
-
HighSEVD-2026-286-01 0 CVEs
Use of Unmaintained Third-Party Components vulnerability on Pro-face STW6000 and Harmony STW6
Schneider Electric is aware of multiple vulnerabilities in its Pro-face STW6000 and Harmony STW6 products. The Pro-face STW6000 and Harmony STW6 products are Basic Web HMI panels belongs to the Schneider Electric Harmony ST6 and Pro-face ST6000 range and is d…
-
High max 8.7SEVD-2026-251-02 1 CVE
Improper Neutralization of Special Elements used in an OS Command vulnerability on PowerLogic T300
Schneider Electric is aware of a vulnerability in the Head Unit (HU250) for the PowerLogic T300 RTU (Remote Terminal Unit) (formerly Easergy T300 RTU). The [PowerLogic T300 RTU](https://www.se.com/ww/en/product-range/62399-easergy-t300) is a modular platform …
-
High max 8.6SEVD-2026-251-01 2 CVEs
Multiple Vulnerabilities on EcoStruxure IT Data Center Expert
Schneider Electric is aware of its vulnerability in its EcoStruxure IT Data Center Expert product The EcoStruxure IT Data Center Expert product is a scalable monitoring software that collects, organizes,and distributes critical device information providing a …
-
High max 7.5
Modicon Controllers M340 / Momentum / MC80 & EcoStruxure™ Control Expert
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 / EcoStruxure™ Control Expert products. [Modicon PAC](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=b…
first Nov 12, 2024 -
High max 8.1
EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon M340, M580 and M580 Safety PLCs
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure™ Control…
first Feb 13, 2024 -
High max 8.1
EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon M340, M580 and M580 CPU Safety
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, Modicon M340, Momentum, MC80, M580 and M580 CPU Safety. The Modicon M580 are PAC and Safety PLCs with built-in Ethernet for process, high availability & safety solutio…
first Jan 10, 2023 -
High max 8.7
Insufficient Entropy vulnerability on Multiple Products
Schneider Electric is aware of a vulnerability in the following products: The Easergy C5 is a scalable and interoperable bay controller, protection and merging unit for large and critical infrastructure electrical distribution systems. The Easergy MiCOM P30 i…
first May 12, 2026 -
High max 7.5
Modicon M340 Controller and Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-envi…
first Aug 12, 2025 -
High max 8.7SEVD-2026-195-02 1 CVE
Insufficiently Protected Credentials vulnerability on EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Cybersecurity Admin Expert product (CAE). The [EcoStruxure™ Cybersecurity Admin Expert](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=63515) product is a c…
-
High max 8.4SEVD-2026-195-01 1 CVE
Out-of-Bounds Write vulnerability in IGSS
Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) product. The [IGSS](https://igss.schneider-electric.com/) product is a state-of-the-art SCADA system used for monitoring and control…
-
High max 7.8
RemoteConnect and SCADAPack™ x70 Utilities
Schneider Electric is aware of a vulnerability in its RemoteConnect and SCADAPack™ x70 Utilities software product. The RemoteConnect and SCADAPack™ x70 Utilities https://www.se.com/ww/en/product-category/6000-telemetry-and-remote-scada-systems/ product is a c…
first Jan 14, 2025 -
High max 8.7SEVD-2026-160-02 2 CVEs
Multiple Vulnerabilities on EasyLogic T150 and Saitel DP RTU
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-select…
-
High max 8.7SEVD-2026-160-03 3 CVEs
Multiple Vulnerabilities on PowerLogic™ P7
Schneider Electric is aware of a vulnerability in its PowerLogic™ P7 product. The PowerLogic™ P7 is a protection and control platform designed for complex and advanced electrical network applications. Failure to apply the remediation provided below may risk u…
-
High max 7.1SEVD-2026-132-03 1 CVE
Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-select…
-
High max 8.2SEVD-2026-132-04 1 CVE
Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure Panel Server
Schneider Electric is aware of its vulnerability in its EcoStruxure Panel Server offer. The EcoStruxure Panel Server is a high performance, modular gateway with enhanced cybersecurity that provides easy and fast connections to multiple concurrent edge control…
-
High max 7.0
Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructu…
first Jan 13, 2026 -
High max 7.8
EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform products are engineering …
first Feb 11, 2025 -
High max 8.5
FlexNet Publisher Vulnerability
Schneider Electric is aware of a vulnerability disclosed on Revenera FlexNet Publisher component. Many vendors, including Schneider Electric, embed Revenera FlexNet Publisher in their offers. Failure to apply the remediation/mitigations provided below may ris…
first Jan 14, 2025 -
High max 8.6
Web Server on Modicon M340, Modbus/TCP Ethernet Modicon M340 module, Modbus/TCP Ethernet Modicon M340 FactoryCast module and Ethernet / Serial RTU communication modules
Schneider Electric is aware of a vulnerability in its Web Server on Modicon M340 and BMXNOE0100/0110, BMXNOR0200H communication modules products. The Modicon M340 is a programmable automation controller; BMXNOE0100 and BMXNOE0110 are network communication mod…
first Jan 14, 2025 -
High max 7.2SEVD-2026-069-04 1 CVE
Improper Control of Generation of Code ('Code Injection') vulnerability on EcoStruxure™ Automation Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Automation Expert product. The EcoStruxure™ Automation Expert product is plant automation software designed for digital control systems in discrete, hybrid and continuous industrial processes.…
-
High max 7.5SEVD-2026-069-05 1 CVE
Use of Hard-coded Credentials vulnerability in EcoStruxure™ IT Data Center Expert
Schneider Electric is aware of a hard-coded credentials vulnerability in its EcoStruxure™ IT Data Center Expert (DCE) product that requires administrator credentials and enabling a feature (SOCKS Proxy) that is off by default. The EcoStruxure™ IT Data Center …
-
High max 8.4
Multiple Vulnerabilities on EcoStruxure Power Build Rapsody
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the singl…
first Jan 13, 2026 -
High max 8.5SEVD-2026-069-06 1 CVE
Deserialization of Untrusted Data vulnerability on Multiple Products
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-inte…
-
High max 7.0SEVD-2026-041-02 2 CVEs
Multiple Vulnerabilities on EcoStruxure™ Building Operation Workstation and EcoStruxure™ Building Operation Webstation
Schneider Electric is aware of a vulnerability in EcoStruxure™ Building Operation Workstation and EcoStruxure™ Building Operation WebStation. [EcoStruxure™ Building Operation (EBO)](https://www.se.com/ww/en/product-range/62111-ecostruxure-building-operation-s…
-
High max 8.8
EcoStruxure™ Power Operation
Schneider Electric is aware of multiple vulnerabilities disclosed in PostgreSQL. Many vendors, including Schneider Electric, use PostgreSQL in their offers. PostgreSQL is a database server that is used as a data store for multiple products. Schneider Electric…
first Jul 8, 2025 -
High max 8.1
Modicon Controllers M340 / Momentum / MC80
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 products.Modicon PAC control and monitor industrial operations.Failure to apply the provided remediations/mitigations below may risk unauthorized access …
first Nov 12, 2024 -
High max 8.8
CODESYS Runtime Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS runtime system V3 communication server. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a …
first Jul 11, 2023 -
High max 8.4SEVD-2025-315-02 1 CVE
EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxureTM Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxureTM Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard proj…
-
High max 7.3SEVD-2025-315-01 3 CVEs
PowerChute™ Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute™ Serial Shutdown product. The [PowerChute™ Serial Shutdown](https://www.se.com/us/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling g…
-
High max 8.7
EcoStruxure™ Power Monitoring Expert Software & EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO)
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premise…
first Aug 12, 2025 -
High max 7.5
Modicon Controllers M241/M251/M258/LMC058
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251 / M258 / LMC058 products. The Modicon Controllers M241/M251/M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https:/…
first May 13, 2025 -
High max 8.2SEVD-2025-287-01 1 CVE
EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server
Schneider Electric is aware of a vulnerability in its EcoStruxure™ OPC UA Server Expert product(s). The [EcoStruxure™ OPC UA Server Expert product(s)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=66388#overview) is a stat…
-
High max 7.3
Schneider Electric Software Update
Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred to as “SESU”). The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to download and install…
first Aug 12, 2025 -
High max 7.1
Pro-face GP-Pro EX and Remote HMI
Schneider Electric is aware of multiple vulnerabilities in its Pro-face GP-Pro EX and Remote HMI products. The Pro-face [GP-Pro EX](https://www.proface.com/en/product/soft/gpproex/top) product is HMI Screen Editor & Logic Programming Software. The Pro-face [R…
first Jan 14, 2025 -
High max 7.2
EVLink WallBox
Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product. The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suita…
first Jun 10, 2025 -
High max 7.8
Vijeo Designer
Schneider Electric is aware of a vulnerability in its Vijeo Designer product. The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Desi…
first Sep 10, 2024 -
High max 7.8
ConneXium Network Manager Software
Schneider Electric is aware of vulnerabilities in its ConneXium Network Manager software. The ConneXium Network Manager software provides a solution for configuring and monitoring the administrable Schneider Electric devices, including switches, routers, fire…
first Apr 8, 2025 -
High max 7.3
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) product. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitoring-expert/#overview is an on-premises s…
first Oct 8, 2024 -
High max 7.5
Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC
Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers) https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/?parent-subcategory-id=3950&filter=business-1-industrial-automation-and-control#products , …
first Jan 14, 2025