Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
76 results · Clear filters · Feed
-
Medium max 5.3
Multiple Altivar Process Drives and Communication Modules
Schneider Electric is aware of a vulnerability in its [ATVdPAC module](http://www.se.com/ww/en/product/VW3A3530D/atv-dpac-module/) / [ATV6000 Medium Voltage Altivar Process Drives](http://www.se.com/ww/en/product-range/65607-altivar-process-atv6000) / [ATV630…
first Sep 9, 2025 -
Medium max 5.9SEVD-2026-251-03 1 CVE
Insufficiently Protected Credentials vulnerability on SCADAPack x70 Products
Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring …
-
Medium max 6.9SEVD-2026-223-01 1 CVE
Improper Restriction of Excessive Authentication Attempts vulnerability on PowerChute Serial Shutdown
Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktops, servers and works…
-
Medium max 7.3SEVD-2026-223-02 2 CVEs
Multiple Vulnerabilities on NetBotz 5 750/755 Products
Schneider Electric is aware of multiple vulnerabilities in its NetBotz 5 – 750/755 products.The NetBotz 5 – 750/755 products are security and environmental monitors providing temperature, humidity, leak, smoke, vibration, door contact, and video monitoring ca…
-
Medium max 7.1SEVD-2026-160-01 1 CVE
Improper Restriction of XML External Entity Reference vulnerability on the EcoStruxure™ IT Data Center Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ IT Data Center Expert. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a compre…
-
Medium max 6.8SEVD-2026-132-01 1 CVE
Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC
Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 lo…
-
Medium max 6.9
Use of Hard-coded Credentials vulnerability on Easergy MiCOM Px40 Series
Schneider Electric is aware of a vulnerability in its Easergy MiCOM Px40 Series products. The [Easergy MiCOM Px40](https://www.se.com/ww/en/product-subcategory/4725-easergy-micom-px40-series/?filter=business-6-medium-voltage-distribution-and-grid-automation) …
first Apr 14, 2026 -
Medium max 5.5
Improper Input Validation Vulnerability in Uni-Telway Driver
Schneider Electric is aware of a vulnerability in its [Uni-Telway driver](https://www.se.com/us/en/product-range/573-unitelway/#overview) which is part of [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unit…
first Feb 11, 2025 -
Medium max 6.9SEVD-2026-104-01 7 CVEs
Multiple Vulnerabilities on PowerChute™ Serial Shutdown
Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The [PowerChute Serial Shutdown](https://www.se.com/ww/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling gr…
-
Medium max 6.5
Modicon M340, Modbus/TCP Ethernet Modicon M340 module, and Modbus/TCP Ethernet Modicon M340 FactoryCast module
Schneider Electric is aware of a vulnerability in its Modicon M340 and BMXNOE0100 and BMXNOE0110 products. The Modicon M340 is a programmable automation controller; BMXNOE0100 and BMXNOE0110 are network modules used with Modicon M340. Failure to apply the mit…
first Jun 11, 2024 -
Medium max 6.9
Improper Resource Shutdown or Release vulnerability in Multiple Products
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, and M262 products. The Modicon Controllers M241 / M251 / M262 are Programmable Logic Controllers for performancedemanding applications. Failure to apply the remediation pr…
first Mar 10, 2026 -
Medium max 5.1
Improper Neutralization vulnerability in Multiple Products
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, M258, and LMC058 products. The [Modicon Controllers M241 / M251 / M258](https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/) and [Modicon LMC0…
first Mar 10, 2026 -
Medium max 7.0
Deserialization of Untrusted Data vulnerability on EcoStruxure™ Foxboro DCS
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected. The [EcoStruxure™ Foxboro DCS…
first Mar 10, 2026 -
Medium max 5.9
EcoStruxure™ Foxboro DCS
Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-rang…
first Dec 9, 2025 -
Medium max 6.5SEVD-2026-013-03 5 CVEs
Multiple Vulnerabilities on Zigbee Products
Schneider Electric is aware of multiple vulnerabilities with EmberZNet disclosed by Silicon Labs. Many vendors, including Schneider Electric, use Silicon Labs’ Zigbee processors in their offers. The following have denial of service vulnerabilities: Wiser iTRV…
-
Medium max 8.6
ISaGRAF Workbench for SAGE RTU
Schneider Electric is aware of multiple vulnerabilities in the third party ISaGRAF Workbench software used by SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along …
first Oct 10, 2022 -
Medium max 6.7
Saitel DR & Saitel DP Remote Terminal Unit
Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) products. The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration fo…
first Aug 12, 2025 -
Medium max 5.4
Modicon Controllers M241/ M251, M258 / LMC058 and M262
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, M258 / LMC058 and M262 product(s). The Modicon Controllers M241 / M251 / M258 / M262 and Modicon Motion Controller LMC058 Programmable Logic Controllers for performanc…
first Jul 9, 2024 -
Medium max 4.1
EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation
Schneider Electric is aware of multiple vulnerabilities in EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation. [EcoStruxure™ Building Operation (EBO)](https://www.se.com/us/en/pr…
first Aug 12, 2025 -
Medium max 5.8SEVD-2025-252-02 2 CVEs
Saitel DR & Saitel DP Remote Terminal Unit
Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) product(s). The Saitel DR RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview is a field device, offering …
-
Medium max 6.9
System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…
-
Medium max 6.5
Modicon Controllers M241/M251/M258/LMC058/M262
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M241 / M251 / M258 / LMC058 / M262 products. The Modicon Controllers M241/M251/M258/M262 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and M…
first Jun 10, 2025 -
Medium max 5.3SEVD-2025-189-04 1 CVE
EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) with Advanced Reporting and Dashboards
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitor…
-
Medium max 4.6
EcoStruxure™ Power Build Rapsody
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Build Rapsody software. The EcoStruxure™ Power Build Rapsody is used to enter or import the single line diagram, to get the extensive bill of material of your switchboard, including all …
first Jan 14, 2025 -
Medium max 4.6SEVD-2025-133-03 1 CVE
EcoStruxure Power Build Rapsody
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Build Rapsody software. EcoStruxure Power Build Rapsody product is used to enter or import the single line diagram, to get the extensive bill of material of switchboards, including all d…
-
Medium max 6.8SEVD-2025-098-02 3 CVEs
Trio™ Q Licensed Data Radios
Schneider Electric is aware of a vulnerability in its Trio™ Q Licensed Data Radio product. The Trio Q Licensed Data Radios product is an advanced, high-speed licensed digital data radios, providing both Ethernet and serial communications for complex and deman…
-
Medium max 6.8SEVD-2025-070-02 1 CVE
EPAS-UI & EcoSUI
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Automation System User Interface (EPAS-UI) product. The EcoStruxure Power Automation System User Interface (EPAS-UI) https://www.se.com/ng/en/product-range/61456-ecostruxure-power-automa…
-
Medium max 6.0SEVD-2025-070-01 1 CVE
EcoStruxure™ Panel Server
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Panel Server product, all models. The EcoStruxure™ Panel Server https://www.se.com/us/en/product-range/40739468-ecostruxure-panel-server/#products is a modular gateway with enhanced cybersecur…
-
Medium max 6.5SEVD-2025-042-04 3 CVEs
Enerlin'X IFE and eIFE
Schneider Electric is aware of vulnerabilities in its Enerlin'X IFE and Enerlin'X eIFE products. The Enerlin'X IFE and eIFE products https://www.se.com/ww/en/product-range/62413-enerlinx-ife-eife-ifm/#products are used to enable Masterpact, PowerPact, and Com…
-
Medium max 5.3SEVD-2024-345-01 1 CVE
PowerChute Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and worksta…
-
Medium max 5.4SEVD-2024-254-02 1 CVE
EcoStruxure™ Power Monitoring Expert and EcoStruxure™ Power Operation or EcoStruxure™ Power SCADA Operation with Advanced Reporting and Dashboards
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power. critical and energy-int…
-
Medium max 6.1
PowerLogic P5
Schneider Electric is aware of a vulnerability in its PowerLogic P5 products. The PowerLogic P5 is a medium voltage protection relay. Failure to apply the mitigations provided below may risk denial of service, device reboot, or an attacker gaining full contro…
first Jun 11, 2024 -
Medium max 6.7
EcoStruxure™ Power Monitoring Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert product (PME). EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power-critical and energy-intensive facilities maximize uptime and ope…
first Mar 14, 2023 -
Medium max 5.5
EcoStruxure™ OPC UA Server Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ OPC UA Server Expert product. EcoStruxure™ OPC UA Server Expert is a communications platform seamlessly linking Schneider Electric PLCs and connected devices to enterprise information syst…
first Jul 11, 2023 -
Medium max 6.5
Modicon PAC Controllers and PLC Simulator for EcoStruxure™ Control Expert and EcoStruxure™ Process Expert
Schneider Electric is aware of multiple vulnerabilities in the Modicon PAC Controllers and PLC simulator included in EcoStruxure™ Control Expert and EcoStruxure™ Process Expert. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation C…
first Aug 10, 2021 -
Medium
Modicon Controllers
Schneider Electric is aware of multiple vulnerabilities in the Modicon Controller products. March 2023 Update: Remediation for the Modicon M580 CPU is available for download
first Sep 26, 2019 -
Medium max 6.5SEVD-2024-163-03 1 CVE
EVlink Home Smart
Schneider Electric is aware of a vulnerability with the existence of a non-disabled SSH interface in its EVlink Home Smart charging station. The EVlink Home Smart charging stations EV charging stations for the residential market. Failure to follow the remedia…
-
Medium max 6.4SEVD-2024-163-04 2 CVEs
SpaceLogic AS-P and AS-B Automation Servers
Schneider Electric is aware of multiple vulnerabilities in its SpaceLogic AS-P and AS-B products. The SpaceLogic AS-P system controller performs key functionality: control logic, trend logging & alarm supervision, and supports communication & connectivity to …
-
Medium max 5.3
Galaxy VS and Galaxy VL
Schneider Electric is aware of a vulnerability in its Galaxy VL and Galaxy VS products. The Schneider Electric Galaxy VS products are 3-phase UPS for edge, small, and medium data centers and other business-critical applications. The Schneider Electric Galaxy …
first Nov 14, 2023 -
Medium max 5.3SEVD-2023-346-03 1 CVE
Easy UPS Online Monitoring Software
Schneider Electric is aware of a vulnerability in its Easy UPS Online Monitoring Software, known as Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China…