Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
152 results · Clear filters · Feed
-
High max 8.1SEVD-2025-042-01 4 CVEs
ASCO 5310 / 5350 Remote Annunciator
Schneider Electric is aware of multiple vulnerabilities in its ASCO 5310 Remote Annunciator and ASCO 5350 Remote Annunciator products. The ASCO 5310 Remote Annunciator and ASCO 5350 Remote Annunciator products are stand-alone, industrial grade interface devic…
-
High max 8.8SEVD-2025-014-08 2 CVEs
Power Logic HDPM6000 High-Density Metering System
Schneider Electric is aware of multiple vulnerabilities in its Power Logic HDPM6000 High-Density Metering System product. The HDPM6000 products are high-density, multi-circuit busway and panelboard power meters for cost and network management in large and cri…
-
High max 7.8SEVD-2025-014-04 1 CVE
Web Designer for Modicon Communication Modules
Schneider Electric is aware of a vulnerability in its Web Designer configuration tool for the following FactoryCast modules: • BMXNOR0200H • BMXNOE0110(H) • BMENOC0311(C) • BMENOC0321(C) The Web Designer product is a software application used to create Web-ba…
-
High max 8.8SEVD-2024-345-02 1 CVE
Harmony HMI and Pro-face HMI products
Schneider Electric is aware of a vulnerability in its Harmony HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 products used with EcoStruxure™ Operator Terminal Expert Software and PFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 products used with Pro-face BLUE Software.…
-
High max 7.5SEVD-2024-317-01 1 CVE
PowerLogic PM5300 Series
Note - PM5310 and PM5330 are not impacted because they use serial communication infrastructure and donot have an Ethernet stack.
-
High max 9.8
PowerLogic PM5500 and PowerLogic PM8ECC
Overview Schneider Electric is aware of a vulnerability in its PowerLogic PM55xx and PowerLogic PM8ECC products. The PowerLogic PM55xx products are power metering devices. The PowerLogic PM8ECC product is an ethernet communication module. Failure to apply the…
first Jun 8, 2021 -
High max 7.8SEVD-2024-282-06 2 CVEs
Zelio Soft 2
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
High max 7.8SEVD-2024-282-03 1 CVE
Easergy Studio
Schneider Electric is aware of a vulnerability in its Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the remediation provided below may risk unauthorized ac…
-
High max 8.5SEVD-2024-282-04 1 CVE
EVlink Home Smart and Schneider Charge
Schneider Electric is aware of a vulnerability with the potential disclosure of confidential information in its EVlink Home Smart and Schneider Charge charging stations. This is not related to any of the customer personal data and potential disclosure cannot …
-
High max 7.2SEVD-2024-282-01 2 CVEs
Data Center Expert
Schneider Electric is aware of a vulnerability in its Data Center Expert product. The Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipmen…
-
High max 7.5
Modicon M340 Controller and Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340 Controller and Communication Modules. The Modicon M340 offers compactness, flexibility, scalability, and robustness for the process industry and a wide range of demanding automation applicatio…
first Apr 12, 2022 -
High max 7.3SEVD-2024-226-02 1 CVE
EcoStruxure™ Machine SCADA Expert / BLUE Open Studio
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure™ Machine SCADA Expert and BLUE Open Studio products. The EcoStruxure™ Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedica…
-
High max 7.5SEVD-2024-226-01 1 CVE
Accutech Manager
Schneider Electric is aware of a vulnerability in its Accutech Manager software. The Accutech Manager software is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk in r…
-
High max 7.5
Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers)
Schneider Electric is aware of multiple vulnerabilities in its Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers). Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control a…
first Apr 11, 2023 -
High max 7.5
EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers)
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers). Modicon PLCs (Programmable Logic Control…
first Jan 10, 2023 -
High max 7.5
Modicon PAC Controllers
Schneider Electric is aware of a vulnerability in its Modicon PAC Controllers. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and pr…
first Aug 9, 2022 -
High max 7.5
Modicon PAC Controllers
Schneider Electric is aware of a vulnerability in its Modicon PAC Controllers. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient and pro…
first Aug 9, 2022 -
High
Embedded FTP Servers for Modicon PAC Controllers
Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. O…
first Mar 22, 2018 -
High max 7.3SEVD-2024-191-03 1 CVE
EcoStruxure Foxboro SCADA FoxRTU Station
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SC…
-
High max 7.8SEVD-2024-191-02 3 CVEs
EcoStruxureTM Foxboro DCS Core Control Services
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product. The EcoStruxureTM Foxboro DCS product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and…
-
High max 7.8SEVD-2024-100-01 1 CVE
Easergy Studio
Schneider Electric is aware of a vulnerability in its Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the provided remediation below may risk unquoted search…
-
High max 8.2
Trio™ Licensed and License-free Data Radios
Schneider Electric is aware of multiple vulnerabilities in its Trio Licensed and License-Free Data Radio products. The Trio Licensed Radio products are designed to provide complete, versatile, and high availability system solutions for long range wireless dat…
first Dec 12, 2023 -
High max 7.8SEVD-2024-072-02 1 CVE
EcoStruxure Power Design - Ecodial
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Design - Ecodial product. The EcoStruxure Power Design - Ecodial product is a software that helps optimize equipment and costs while managing operating specifications, all along with the …
-
High max 7.8SEVD-2024-044-03 1 CVE
EcoStruxure IT Gateway
Schneider Electric is aware of a vulnerability in its EcoStruxure IT Gateway product. EcoStruxure IT Gateway product is software that handles communication with your monitored devices, gathering and sending device data for smart alarm notification. Failure to…
-
High max 8.8SEVD-2024-044-02 1 CVE
Harmony Relay NFC
Schneider Electric is aware of a vulnerability in its Harmony Relay NFC products. The Harmony Control Relay and Harmony Timer Relay products are 8A multifunction 3-phase control and modular timing relays. Failure to apply the mitigations provided below may ri…
-
High max 7.8SEVD-2024-009-02 1 CVE
Easergy Studio
Schneider Electric is aware of a vulnerability in our Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the remediations provided below may risk an attacker wi…
-
High max 8.8
CODESYS Runtime Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS Runtime. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a denial of service or, in some c…
first Apr 11, 2023 -
High max 8.8
EcoStruxure™ Control Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert product. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon PLCs (Programmable Logic Controllers) and PACs (Programmab…
first Apr 11, 2023 -
High max 6.5
Harmony (formerly known as Magelis) HMI Panels
Schneider Electric is aware of a vulnerability in the Harmony (formerly known as Magelis) HMI Panel products. Harmony HMI Panels are the main visible automation component that manage all vital machine features, including visualization, control, supervision, d…
first Aug 13, 2019 -
High max 7.2
PowerLogic ION8650, PowerLogic ION8800
Schneider Electric is aware of multiple vulnerabilities in its PowerLogic ION8650 and PowerLogic ION8800 products. The PowerLogic products are revenue and power quality meters for utility electrical network monitoring. Failure to apply the mitigations provide…
first Nov 14, 2023 -
High max 8.2SEVD-2023-318-02 2 CVEs
EcoStruxure Power Monitoring Expert and EcoStruxure™ Power Operation with Advanced Reporting and Dashboards Module
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Power Monitoring Expert (PME) product, EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module. EcoStruxure™ Power M…
-
High max 7.8SEVD-2023-255-01 1 CVE
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of a vulnerability in its Update Service for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The IGSS Update S…
-
High max 8.8SEVD-2023-192-01 4 CVEs
StruxureWare Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert (DCE) product. This product was recently renamed to EcoStruxure™ IT Data Center Expert. EcoStruxure™ IT Data Center Expert is a scalable monitoring software tha…
-
High max 7.8SEVD-2023-192-03 1 CVE
Accutech Manager
Schneider Electric is aware of a vulnerability in its Accutech Manager product. Accutech Manager is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk local privile…
-
High max 7.8SEVD-2023-164-02 1 CVE
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of a vulnerability in its Dashboard module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a SCADA system used for monitoring and controlling industrial processes. The Dashboard access data of the SCA…
-
High max 7.8SEVD-2023-164-04 2 CVEs
EcoStruxureTM Foxboro DCS Control Core Services
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The DCS component impacted is the Control Core Services package. The EcoStruxureTM Foxboro…
-
High max 7.8SEVD-2023-164-01 1 CVE
EcoStruxure™ Operator Terminal Expert and Pro-face BLUE
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI designs. Fai…
-
High max 8.8SEVD-2023-129-03 1 CVE
PowerLogic ION7400 / PM8000 / ION9000 Power Meters
Schneider Electric is aware of the use of an unsecure protocol in its PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, PowerLogic ION8800 and all legacy ION products. The PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000,…
-
High max 7.2SEVD-2023-101-02 1 CVE
Conext™ Gateway/ InsightHome and InsightFacility
Schneider Electric is aware of a vulnerability in its Conext™ Gateway/ InsightHome and InsightFacility products. The InsightHome and InsightFacility products are smart edge devices that connect customers’ Schneider Electric solar and storage systems to the In…
-
High max 8.8SEVD-2023-073-04 8 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Server, Dashboard and Custom Reports modules for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling…