Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
152 results · Clear filters · Feed
-
HighSEVD-2021-222-03 1 CVE
Pro-face GP-Pro EX
Schneider Electric is aware of a vulnerability in its Pro-face GP-Pro EX product. The Pro-face GP-Pro EX product is an HMI Screen Editor & Logic Programming Software. Failure to apply the remediations provided below may risk software hijacking, which could re…
-
HighSEVD-2021-222-06 3 CVEs
CODESYS V2 Vulnerabilities in Programmable Automation Controller (PacDrive) M
Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V2 runtime for industrial control systems, which is used in its Programmable Automation Controller (PacDrive) M products. The Programmable Automation Controller (PacDrive)…
-
High
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their associated communication modules. The Modicon Ethernet Programmable Automation are controllers for industrial pro…
first Dec 8, 2020 -
High
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (V2.0)
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their associated communication modules. The Modicon Ethernet Programmable Automation are controllers for industrial pro…
first Dec 8, 2020 -
High
EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and RemoteConnect™
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert product and EcoStruxure™ Process Expert. The EcoStruxure™ Control Expert product is a software to design, diagnose, maintain and update applications for Modicon M340, M580 and M…
first Dec 8, 2020 -
HighSEVD-2021-159-01 13 CVEs
IGSS (Interactive Graphical SCADA System)
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
High
Easergy Builder
Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy Builder configuration tool. Schneider Electric has worked closely with Ilya Karpov and Evgeniy Druzhinin of Rostelecom-Solar to re…
first Jun 9, 2020 -
HighSEVD-2021-130-05 1 CVE
Modicon M241 & M251 Logic Controllers
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
High
Modicon Controllers, EcoStruxure™ Control Expert and Unity Pro Programming Software
Researchers from Airbus Cybersecurity have made Schneider Electric aware of a vulnerability in two versions of Schneider Electric's Modicon programmable controllers and its EcoStruxure Control Expert (formerly Unity Pro) programming software. Since alerting u…
first Mar 20, 2020 -
High
Interactive Graphical SCADA System (IGSS)
Schneider Electric is aware of multiple vulnerabilities in the Interactive Graphical SCADA System (IGSS) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major in…
first Nov 10, 2020 -
HighSEVD-2021-068-01 4 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in the Interactive Graphical SCADA System (IGSS) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major in…
-
High max 7.3
SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator
Schneider Electric is aware of multiple vulnerabilities in the SCADAPack x70 Remote Connect and the SCADAPack x70 Security Administrator applications.
first Sep 8, 2020 -
High max 6.1SEVD-2021-040-01 3 CVEs
PowerLogic Power Metering Products
Customers should use appropriate methodologies when applying these upgrades to their devices. We strongly recommend evaluating the impact of these updates in a test and development environment prior to deployment. Contact Schneider Electric's Customer Care Ce…
-
High max 9.8
Modicon M100/M200/M221 Programmable Logic Controller
Schneider Electric is aware of multiple vulnerabilities in its Modicon M100, M200, and M221 products. The Modicon M100/M200/M221 are Nano Programmable Logic Controllers (PLC) made to control basic automation for machines. The M100/M200/M221 are configured usi…
first Nov 10, 2020 -
High
EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
first Nov 9, 2020 -
HighSEVD-2020-343-08 3 CVEs
Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium
Customers should use appropriate methodologies when upgrading their systems. We strongly recommend the use of back-ups and evaluating the impact of these upgrades in a Test and Development environment or on an offline infrastructure. Contact Schneider Electri…
-
HighSEVD-2020-287-04 3 CVEs
EcoStruxure™ and SmartStruxure™ Power Monitoring and SCADA Software
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ and SmartStruxure™ Power Monitoring & SCADA Software. Failure to apply the mitigation provided below may risk remote code execution, which could result in an attacker gaining root lev…
-
HighSEVD-2020-287-03 1 CVE
Smartlink, PowerTag, and Wiser Series Gateways
Schneider Electric is aware of a vulnerability in its Smartlink, PowerTag, and Wiser series gateways. Failure to apply the mitigation provided below may risk unauthorized access to the product.
-
High
Schneider Electric Modbus Serial Driver
Schneider Electric is aware of a vulnerability in the Modbus Serial Driver Component.
first Aug 11, 2020 -
High
Vijeo Designer and Vijeo Designer Basic Software
Schneider Electric is aware of a vulnerability in the Vijeo Designer Basic and Vijeo Designer software products.
first May 12, 2020 -
High
Schneider Electric PACTware
Schneider Electric is aware of multiple vulnerabilities in the PACTware product.
first Aug 11, 2020 -
HighSEVD-2020-224-02 1 CVE
spaceLYnk & Wiser for KNX (formerly homeLYnk)
Schneider Electric is aware of a vulnerability in the spaceLYnk and Wiser for KNX (formerly known as homeLYnk) products.
-
HighSEVD-2020-224-05 1 CVE
PowerChute Business Edition
Schneider Electric is aware of a vulnerability in the PowerChute Business Edition software which may lead to remote code execution.
-
HighSEVD-2020-196-01 1 CVE
Schneider Electric Software Update (SESU)
Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update (SESU) product.
-
HighSEVD-2020-161-03 1 CVE
Modicon LMC078 Logic Controller additional URGENT/11 Fix
Schneider Electric is aware of a vulnerability introduced in the VxWorks patch delivered by Wind River fixing URGENT/11 vulnerabilities affecting the Modicon LMC078 Logic Controller
-
High
GoAhead Web Server vulnerability
Schneider Electric is aware of a proof of concept exploit available for this vulnerability. It is imperative that customers upgrade the firmware for the affected products.
first Dec 15, 2015 -
High
Andover Continuum System
Schneider Electric is aware of multiple vulnerabilities in the Andover Continuum product line. Andover Continuum allows users to view and control functions of the Continuum system.
first Mar 10, 2020 -
High max 9.8SEVD-2020-105-01 1 CVE
Modicon M100/M200/M221 controllers, SoMachine Basic and EcoStruxure Machine Expert - Basic Programming Software
Schneider Electric is aware of a vulnerability in the Modicon M100/M200/M221 controllers, SoMachine Basic and EcoStruxure Machine Expert - Basic products.
-
High max 7.5SEVD-2020-070-02 1 CVE
Modicon Quantum Ethernet Network module and Quantum / Premium COPRO
Schneider Electric is aware of a vulnerability in the Quantum Ethernet Network module and Quantum/Premium COPRO.
-
HighSEVD-2020-070-01 2 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in the IGSS product.
-
HighSEVD-2020-042-01 1 CVE
ProSoft Configurator for Modicon PMEPXM0100 (H)
Schneider Electric is aware of a vulnerability in the ProSoft Configurator for the PMEPXM0100 (H) module.
-
High max 9.8
Security Notification - U.motion Builder software
Schneider Electric is aware of an exploit that targets Schneider Electric’s U.motion Builder software. It is imperative customers cease using U.motion Builder software and remove it from their systems immediately.
first Apr 5, 2018