Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
77 results · Clear filters · Feed
-
Medium max 5.3SEVD-2023-346-03 1 CVE
Easy UPS Online Monitoring Software
Schneider Electric is aware of a vulnerability in its Easy UPS Online Monitoring Software, known as Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China…
-
Medium max 5.3SEVD-2023-220-01 1 CVE
Pro-face GP-Pro EX
Schneider Electric is aware of a vulnerability in its Pro-face GP-Pro EX product. The Pro-face GP-Pro EX product is an HMI Screen Editor & Logic Programming Software. The affected module is WinGP, which is the HMI runtime that enable HMI project execution on …
-
Medium max 5.0SEVD-2023-129-01 1 CVE
OPC Factory Server
Schneider Electric is aware of a vulnerability in its OPC Factory Server (OFS). OPC Factory Server (OFS) is a standards compliant server application allowing open, real-time access to Schneider Electric automation and electrical distribution devices connected…
-
Medium max 6.3SEVD-2023-101-06 1 CVE
Easergy Builder
Schneider Electric is aware of a vulnerability in its Easergy Builder installer. Easergy Builder is a configuration tool that supports Easergy T300, Saitel DR and Saitel DP. This vulnerability is only exploitable during the installation process and will not i…
-
Medium max 5.5
SCADAPack Workbench
Schneider Electric is aware of a vulnerability in its SCADAPack Workbench product. SCADAPack Workbench is a programming and configuration tool for SCADAPack 300E RTUs and SCADAPack 500E RTUs. Failure to apply the mitigations provided below may risk informatio…
first Mar 28, 2022 -
Medium max 6.3
Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules
Schneider Electric is aware of multiple vulnerabilities in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their communication modules. The Modicon Ethernet Programmable Automation products are controllers for industr…
first Nov 10, 2020 -
Medium max 5.3SEVD-2023-045-01 1 CVE
EcoStruxureTM Geo SCADA Expert
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Geo SCADA Expert software product, formerly known as ClearSCADA. The EcoStruxureTM Geo SCADA Expert product is an open, flexible and scalable software for telemetry and remote SCADA solutions…
-
Medium max 4.3SEVD-2023-010-01 1 CVE
EcoStruxureTM Machine Expert – HVAC (formerly SoMachine - HVAC)
Schneider Electric is aware of a vulnerability in EcoStruxureTM Machine Expert - HVAC (formerly SoMachine - HVAC). The EcoStruxureTM Machine Expert - HVAC is a commissioning software for programmable logic controllers M171/M172. The EcoStruxureTM Machine Expe…
-
MediumSEVD-2022-347-02 1 CVE
Saitel DR RTU
Schneider Electric is aware of a vulnerability in the Triangle MicroWorks DNP3 Outstation Libraries used in the Saitel DR RTU (Remote Terminal Unit). The SAITEL DR RTU is a field device, offering a solid and powerful platform for data acquisition, communicati…
-
Medium max 5.5SEVD-2022-221-03 1 CVE
EcoStruxure™ Control Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert product. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon M340, M580, M580S, Premium, Momentum and Quantum ranges. Failure to …
-
Medium max 6.8SEVD-2022-193-03 1 CVE
Acti9 PowerTag Link C
Schneider Electric is aware of a vulnerability in its Acti9 PowerTag Link C product. The Acti9 PowerTag Link C is the simplest and most efficient way to achieve a fully connected panel. Failure to apply the remediation provided below may risk an improper acce…
-
Medium max 5.3
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ for x70 software products. EcoStruxure™ Control Expert is the common programming, debugging and operating softwar…
first Mar 8, 2022 -
Medium max 4.8SEVD-2022-165-02 1 CVE
Geo SCADA Mobile
Schneider Electric is aware of a vulnerability in its EcoStruxure Geo SCADA Mobile product. The Geo SCADA Mobile product is an Android mobile app which provides remote access to data within a Geo SCADA Expert system when used via the optional Geo SCADA Mobile…
-
Medium max 6.5SEVD-2022-165-05 3 CVEs
EcoStruxure Power Commission
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Commission software. The EcoStruxure Power Commission software is comprehensive software to provide strong function for setup, test and commission for low voltage power distribut…
-
Medium max 5.3SEVD-2022-165-07 1 CVE
CanBRASS
Schneider Electric is aware of a vulnerability in its CanBRASS product. The CanBRASS product (https://www.se.com/ww/en/product-range/61293-canbrass/#software-and-firmware) is a design and costing tool for Canalis busbar trunking runs. Failure to apply the rem…
-
MediumSEVD-2022-130-02 1 CVE
Saitel DP RTU
Schneider Electric is aware of a vulnerability in the Triangle MicroWorks DNP3 Outstation Libraries used in the Saitel DP RTU (Remote Terminal Unit). The Saitel DP RTU (Remote Terminal Unit) is a modular platform for medium voltage and low voltage public dist…
-
Medium
APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices
Schneider Electric is aware of multiple vulnerabilities in its products that use the Network Management Card 2 (NMC2), Network Management Card 3 (NMC3), and the NMC embedded devices. The NMC2 and the NMC3 cards and embedded devices allow for secure monitoring…
first Nov 9, 2021 -
MediumSEVD-2022-039-05 4 CVEs
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Geo SCADA Expert product (formerly known as ClearSCADA). EcoStruxure Geo SCADA Expert software is an open, flexible, and scalable software system for telemetry and remote SCADA solutio…
-
Medium max 9.8SEVD-2022-011-02 1 CVE
Easergy T300
Schneider Electric is aware of a vulnerability in the Easergy T300 RTU (Remote Terminal Unit). The Easergy T300 is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the mitigations provided below ma…
-
Medium max 8.0
APC by Schneider Electric Rack PDU
Schneider Electric is aware of a vulnerability in its Rack Power Distribution Unit (PDU) products. The Rack PDU products (AP7xxxx, AP8xxxx, and APDU9xxx series) are devices that provide real-time remote monitoring at the outlet level to provide: • advanced da…
first Dec 14, 2021 -
MediumSEVD-2021-348-01 2 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Collector module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS …
-
MediumSEVD-2021-194-03 1 CVE
SoSafe Configurable
Schneider Electric is aware of a vulnerability in its SoSafe Configurable product. The SoSafe Configurable product is used to configure Preventa safety controllers. Failure to apply the remediations provided below may risk code execution on the engineering wo…
-
MediumSEVD-2021-194-04 1 CVE
C-Bus Toolkit
Schneider Electric is aware of a vulnerability in its C-Bus Toolkit product. The C-Bus Toolkit product is an application you run on your personal computer to configure and commission C-Bus Installations. Failure to apply the remediations provided below may ri…
-
MediumSEVD-2021-130-07 1 CVE
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure Geo SCADA Expert products (formerly known as ClearSCADA). The EcoStruxure Geo SCADA Expert product is an open, flexible and scalable software system for telemetry and remote SCADA solutions. Fa…
-
Medium
U.motion Servers and Touch Panels
Schneider Electric is aware of multiple vulnerabilities in the U.motion servers and touch panel products.
first May 12, 2020 -
Medium max 7.5
Web Server on Modicon M340, Legacy Offers Modicon Quantum Modicon Premium and associated Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340, Modicon Quantum and Modicon Premium legacy offers and associated communication modules. The Modicon Ethernet Programmable Automation controller products are controllers for industrial process…
-
Medium max 4.7SEVD-2020-343-09 1 CVE
Modicon M258 Logic Controllers and SoMachine/ SoMachine Motion Software
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
MediumSEVD-2020-343-02 1 CVE
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of a vulnerability in the Schneider Electric EcoStruxure Geo SCADA Expert product. EcoStruxure Geo SCADA Expert software is an integrated, scalable and reliable Supervisory Control and Data Acquisition (SCADA) software with ready-t…
-
Medium max 7.5
Modicon M218/M241/M251/M258 Logic Controllers,SoMachine/SoMachine Motion, EcoStruxure™ Machine Expert
Schneider Electric is aware of multiple vulnerabilities in the Modicon M218, M241, M251 and M258 Logic Controllers, SoMachine & SoMachine Motion, and EcoStruxure Machine Expert products. The Ecostruxure Machine Expert products are programmable logic controlle…
first Apr 14, 2020 -
Medium max 7.0SEVD-2020-315-04 7 CVEs
EcoStruxure Building Operation (EBO)
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
MediumSEVD-2020-224-03 1 CVE
Modicon M218 Logic Controller
Schneider Electric is aware of a vulnerability in the Modicon M218 Logic Controller product.
-
MediumSEVD-2020-224-07 1 CVE
SoMove
Schneider Electric is aware of a vulnerability in the SoMove application.
-
Medium
Vijeo Designer and Vijeo Designer Basic
Schneider Electric is aware of a vulnerability in the Vijeo Designer and Vijeo Designer Basic Software products.
first Apr 14, 2020 -
MediumSEVD-2020-224-06 1 CVE
Harmony® eXLhoist
Schneider Electric is aware of the Bluetooth Low Energy vulnerability, known as SweynTooth, which affects the Harmony® eXLhoist product.
-
MediumSEVD-2020-161-01 1 CVE
Modicon M218 Logic Controller
Schneider Electric is aware of a vulnerability in the Modicon M218 Logic Controller product.
-
MediumSEVD-2020-070-03 1 CVE
ZigBee Installation Toolkit
Schneider Electric is aware of a vulnerability in the ZigBee Installation Toolkit product.
-
MediumSEVD-2020-014-01 1 CVE
MSX Configurator
Schneider Electric is aware of a vulnerability in the MSX Configurator product.