Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
152 results · Clear filters · Feed
-
High max 7.5
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Premium and Associated Communication Modules
Schneider Electric is aware of multiple vulnerabilities in the web server component of the Modicon M340 PLC. In addition, the Modicon Quantum and Modicon Premium Legacy offers, and associated communication modules are affected. The Modicon Ethernet Programmab…
first Sep 14, 2021 -
High max 8.8SEVD-2023-045-02 9 CVEs
StruxureWare Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert product. The StruxureWare Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providi…
-
High max 8.3SEVD-2023-045-03 1 CVE
Merten KNX devices
Schneider Electric is aware of a vulnerability in its Merten KNX products. The Merten KNX products in the table below are home automation products for lighting and temperature control. Failure to apply the mitigations provided below may risk an authentication…
-
High max 7.6
NetBotz 4 - 355/450/455/550/570
Schneider Electric is aware of multiple vulnerabilities in its NetBotz 4 - 355/450/455/550/570 products. The NetBotz 4 - 355/450/455/550/570 products are security and environmental monitors providing temperature, humidity, leak, smoke, vibration, door contact…
first Nov 8, 2022 -
High max 7.5SEVD-2023-010-03 1 CVE
EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Operation and Power SCADA Operation software EcoStruxure™ Power Operation and EcoStructure™ Power SCADA Operation are on-premises software offers that provides a single platform to monit…
-
High max 7.4SEVD-2023-010-04 1 CVE
EcoStruxure™ Power SCADA Anywhere
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power SCADA Anywhere product. EcoStruxure™ Power SCADA Anywhere is an on-premises software that provides remote web browser access to the EcoStruxure Power Operation desktop HMI client applica…
-
High max 7.8SEVD-2022-347-03 1 CVE
EcoStruxure Power Commission
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Commission software product. The EcoStruxure Power Commission software is an intelligent software that helps you easily set up, test, and commission the electrical products and s…
-
High max 7.8
C-Bus Toolkit and C-Gate Server
Schneider Electric is aware of multiple vulnerabilities in its C-Bus Toolkit and C-Gate server products. The C-Bus Toolkit product, which includes C-Gate Server, is an application you run on your personal computer to configure and commission C-Bus Installatio…
first Apr 13, 2021 -
High
homeLYnk (Wiser For KNX) and spaceLYnk
Schneider Electric is aware of multiple vulnerabilities in its homeLYnk (Wiser For KNX) and spaceLYnk products. HomeLYnk (Wiser for KNX) products are personalized energy efficiency solutions, offering a complete system based on open protocols: KNX, Modbus, BA…
first May 11, 2021 -
High
EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Operation and Power SCADA Operation software. EcoStruxure™ Power Operation and EcoStructure™ Power SCADA Operation are on-premises software offers that provides a single platform to moni…
first Oct 11, 2022 -
HighSEVD-2022-284-02 2 CVEs
EcoStruxure™ Panel Server Box (PAS900)
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Panel Server Box (PAS900) product. The EcoStruxure™ Panel Server Box (PAS900) product is a cloud connected gateway with 4G/WIFI/Ethernet that supports Modbus TCP/RTU for south communication. F…
-
High max 7.0SEVD-2022-284-01 6 CVEs
EcoStruxure™ Operator Terminal Expert and Pro-face BLUE
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI des…
-
High
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and Associated Communication Modules
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and associated communication modules. The Modicon Ethernet Programmable Automation controller products are controllers for …
first Dec 8, 2020 -
High
SNMP Service on Modicon M340 and Associated Communication Modules
Schneider Electric is aware of a vulnerability in the Modicon M340 offer and associated communication modules. Modicon M340 Programable Automation Controllers are used in industrial processes and infrastructure control. Failure to apply the remediations provi…
first Dec 8, 2020 -
HighSEVD-2022-256-01 0 CVEs
EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. EcoStruxure Machine SCADA Expert is a powerful software for developing HMI, SCADA, OEE and Dashboard projects dedicated to …
-
High max 7.5
OPC UA and X80 advanced RTU Modicon Communication Modules
Schneider Electric is aware of multiple vulnerabilities in its BMENUA0100 - OPC UA module and BMENOR2200H X80 advanced RTU communication module for M580. The BMENUA0100 - OPC UA module for M580 is an Ethernet communications module with an embedded OPC UA serv…
first Jul 12, 2022 -
High max 8.8SEVD-2022-193-02 1 CVE
SpaceLogic C-Bus Home Controller, formerly known as C-Bus Wiser Home Controller MK2
Schneider Electric is aware of a vulnerability in the SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Homer Controller MK2. The SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Home Controller MK2 is a home…
-
High max 7.8
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ for x70 software products. EcoStruxure™ Control Expert is the common programming, debugging and operating softwar…
first Sep 14, 2021 -
High max 8.8SEVD-2022-193-04 3 CVEs
Easergy P5
Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device’s credentials, denia…
-
High max 8.0SEVD-2022-165-08 2 CVEs
EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Cybersecurity Admin Expert product. The EcoStruxure™ Cybersecurity Admin Expert product (CAE) is a solution for managing cybersecurity in an electrical network’s operational technolog…
-
High max 8.6SEVD-2022-165-03 3 CVEs
Conext™ Combox
Schneider Electric is aware of multiple vulnerabilities in its Conext™ ComBox product which was discontinued in January 2020 and is no longer in support. The Conext™ ComBox is a communication and monitoring device for installers and operators of Conext solar …
-
High max 8.0
Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its Data Center Expert product. The Data Center Expert product provides an efficient way for organizations to monitor and manage their company-wide multi-vendor physical infrastructure, including powe…
-
High
EcoStruxure Power Build - Rapsody
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotatio…
first Jan 12, 2021 -
High max 8.0SEVD-2022-130-01 1 CVE
PowerLogic ION Setup
Schneider Electric is aware of a vulnerability in its PowerLogic ION Setup product. The PowerLogic ION Setup product is an engineering tool for configuration and maintenance of PowerLogic metering devices. Failure to apply the remediations provided below may …
-
High max 8.8SEVD-2022-067-03 1 CVE
Ritto Wiser™ Door
Schneider Electric is aware of a vulnerability impacting its Ritto Wiser™ Door product. The Ritto Wiser™ Door provides convenient door communication: stationary via the highresolution, large-format panel or gateway in the sub-distribution and mobile via an ap…
-
High
Windows Print Spooler embedded in EcoStruxure™ Process Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert product. The EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market…
first Nov 9, 2021 -
High
Easergy P5
Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device credentials, denial …
first Jan 11, 2022 -
HighSEVD-2022-039-06 1 CVE
Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic
Schneider Electric is aware of a vulnerability in Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic. The Harmony/Magelis iPC Series HMI products are configured by Vijeo Designer software. Vijeo Designer and Vijeo Designer Basic are softw…
-
HighSEVD-2022-039-03 1 CVE
Easergy P40
Schneider Electric is aware of multiple vulnerabilities in its Easergy P40 product line. The Easergy P40 is a protection relay series for MV, HV and EHV protection. Failure to apply the mitigation provided below may risk disclosure of device credentials, loss…
-
High
EcoStruxure EV Charging Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System) products. The EcoStruxure EV Charging Expert products are load management, access management and supervision soluti…
-
High max 7.5SEVD-2022-011-07 4 CVEs
EcoStruxure™ Power Monitoring Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Power Monitoring Expert product (PME). EcoStruxure Power Monitoring Expert is on-premise software used to help power-critical and energy-intensive facilities maximize uptime and opera…
-
High max 7.5SEVD-2022-011-05 6 CVEs
ConneXium Tofino Firewall and Loadable Security Modules
Schneider Electric is aware of multiple vulnerabilities in its ConneXium Tofino Firewall products, and associated Loadable Security Modules (LSM) Connexium Tofino Firewall and LSM products are part of the ConneXium Tofino Industrial Security Solution providin…
-
HighSEVD-2022-011-04 1 CVE
Easergy P3
Schneider Electric is aware of a vulnerability in its Easergy P3 products. The Easergy P3 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below could lead to communications loss, device reboot, or at attacker ga…
-
High max 7.1SEVD-2022-011-01 2 CVEs
Ethernet and Web server on Modicon M340 controller and Communication Modules
Schneider Electric is aware of multiple vulnerabilities in its Modicon M340 controller and Communication Modules. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. The Modicon M340 offers compactn…
-
HighSEVD-2021-313-01 1 CVE
SCADAPack 300E Series RTU
Schneider Electric is aware of a vulnerability in its SCADAPack 300E Series RTU products. The SCADAPack 300E Series RTUs are a range of compact Smart RTU which control and monitor remote assets. Failure to apply the remediation or mitigations provided below m…
-
HighSEVD-2021-313-07 3 CVEs
Eurotherm GUIcon
Schneider Electric is aware of multiple vulnerabilities in its GUIcon software. The GUIcon software was a configuration tool for the discontinued penGUIn HMI range. Failure to apply the mitigations provided below may risk code belonging to the attacker being …
-
HighSEVD-2021-285-01 1 CVE
spaceLYnk, Wiser For KNX, fellerLYnk
Schneider Electric is aware of a vulnerability in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility and simplifies building management. Wiser…
-
HighSEVD-2021-285-02 1 CVE
ConneXium Network Manager (CNM) Software
Schneider Electric is aware of a vulnerability in its ConneXium Network Manager (CNM) software. The ConneXium Network Manager (CNM) is a software which allows users to configure one or more Ethernet devices with a few button clicks, reducing the need to log i…
-
HighSEVD-2021-285-04 1 CVE
Modicon M218 Logic Controller
Schneider Electric is aware of a vulnerability in its Modicon M218 Logic Controller product. The Modicon M218 Logic Controller is a programmable controller providing an optimized solution to repetitive machines based on high speed counting and simple position…
-
HighSEVD-2021-222-05 1 CVE
AccuSine PCSn/PCS+/PFV+
Schneider Electric is aware of a vulnerability in its AccuSine PCSn, PCS+ and PFV+ products. AccuSine addresses power quality issues and stabilizes electrical networks by providing harmonic mitigation, power factor correction, and load balancing. Failure to a…