Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
294 results · Feed
-
High max 8.4
Multiple Vulnerabilities on EcoStruxure Power Build Rapsody
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the singl…
first Jan 13, 2026 -
High max 8.5SEVD-2026-069-06 1 CVE
Deserialization of Untrusted Data vulnerability on Multiple Products
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-inte…
-
Critical max 9.3SEVD-2026-041-01 1 CVE
Improper Check for Unusual or Exceptional Conditions on Multiple Products
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to a…
-
High max 7.0SEVD-2026-041-02 2 CVEs
Multiple Vulnerabilities on EcoStruxure™ Building Operation Workstation and EcoStruxure™ Building Operation Webstation
Schneider Electric is aware of a vulnerability in EcoStruxure™ Building Operation Workstation and EcoStruxure™ Building Operation WebStation. [EcoStruxure™ Building Operation (EBO)](https://www.se.com/ww/en/product-range/62111-ecostruxure-building-operation-s…
-
High max 8.8
EcoStruxure™ Power Operation
Schneider Electric is aware of multiple vulnerabilities disclosed in PostgreSQL. Many vendors, including Schneider Electric, use PostgreSQL in their offers. PostgreSQL is a database server that is used as a data store for multiple products. Schneider Electric…
first Jul 8, 2025 -
Medium max 5.9
EcoStruxure™ Foxboro DCS
Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-rang…
first Dec 9, 2025 -
Medium max 6.5SEVD-2026-013-03 5 CVEs
Multiple Vulnerabilities on Zigbee Products
Schneider Electric is aware of multiple vulnerabilities with EmberZNet disclosed by Silicon Labs. Many vendors, including Schneider Electric, use Silicon Labs’ Zigbee processors in their offers. The following have denial of service vulnerabilities: Wiser iTRV…
-
High max 8.1
Modicon Controllers M340 / Momentum / MC80
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 products.Modicon PAC control and monitor industrial operations.Failure to apply the provided remediations/mitigations below may risk unauthorized access …
first Nov 12, 2024 -
Critical max 9.8
EcoStruxure™ Foxboro DCS Advisor
Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services. The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure…
-
High max 8.8
CODESYS Runtime Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS runtime system V3 communication server. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a …
first Jul 11, 2023 -
Critical max 9.1
ISaGRAF Vulnerabilities in IEC 61131-3 Programming and Engineering Tools
On June 8, 2021, Rockwell Automation disclosed multiple vulnerabilities in its ISaGRAF Workbench and ISaGRAF Runtime products. Multiple vendors, including Schneider Electric, embed ISaGRAF in their offers. ISaGRAF Workbench is used to program applications for…
first Jun 8, 2021 -
Medium max 8.6
ISaGRAF Workbench for SAGE RTU
Schneider Electric is aware of multiple vulnerabilities in the third party ISaGRAF Workbench software used by SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along …
first Oct 10, 2022 -
High max 8.4SEVD-2025-315-02 1 CVE
EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxureTM Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxureTM Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard proj…
-
Medium max 6.7
Saitel DR & Saitel DP Remote Terminal Unit
Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) products. The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration fo…
first Aug 12, 2025 -
High max 7.3SEVD-2025-315-01 3 CVEs
PowerChute™ Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute™ Serial Shutdown product. The [PowerChute™ Serial Shutdown](https://www.se.com/us/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling g…
-
High max 8.7
EcoStruxure™ Power Monitoring Expert Software & EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO)
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premise…
first Aug 12, 2025 -
High max 7.5
Modicon Controllers M241/M251/M258/LMC058
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251 / M258 / LMC058 products. The Modicon Controllers M241/M251/M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https:/…
first May 13, 2025 -
High max 8.2SEVD-2025-287-01 1 CVE
EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server
Schneider Electric is aware of a vulnerability in its EcoStruxure™ OPC UA Server Expert product(s). The [EcoStruxure™ OPC UA Server Expert product(s)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=66388#overview) is a stat…
-
Critical max 9.8
Modicon M241 / M251 / M258 / LMC058
Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/ products. The Mod…
first Dec 10, 2024 -
Medium max 5.4
Modicon Controllers M241/ M251, M258 / LMC058 and M262
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, M258 / LMC058 and M262 product(s). The Modicon Controllers M241 / M251 / M258 / M262 and Modicon Motion Controller LMC058 Programmable Logic Controllers for performanc…
first Jul 9, 2024 -
Critical max 10.0
Galaxy VS, Galaxy VL, Galaxy VXL
Schneider Electric is aware of a vulnerability disclosed on the Erlang/OTP's SSH Server component used Schneider Electric Galaxy VS, VL, and VXL.Many vendors, including Schneider Electric, embed the Erlang/OTP's SSH Server in their offers.The Galaxy VS, Galax…
first May 13, 2025 -
High max 7.3
Schneider Electric Software Update
Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred to as “SESU”). The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to download and install…
first Aug 12, 2025 -
High max 7.1
Pro-face GP-Pro EX and Remote HMI
Schneider Electric is aware of multiple vulnerabilities in its Pro-face GP-Pro EX and Remote HMI products. The Pro-face [GP-Pro EX](https://www.proface.com/en/product/soft/gpproex/top) product is HMI Screen Editor & Logic Programming Software. The Pro-face [R…
first Jan 14, 2025 -
Medium max 4.1
EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation
Schneider Electric is aware of multiple vulnerabilities in EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation. [EcoStruxure™ Building Operation (EBO)](https://www.se.com/us/en/pr…
first Aug 12, 2025 -
Medium max 5.8SEVD-2025-252-02 2 CVEs
Saitel DR & Saitel DP Remote Terminal Unit
Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) product(s). The Saitel DR RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview is a field device, offering …
-
Critical max 9.0
BadAlloc Vulnerabilities
Schneider Electric is aware of multiple memory allocation vulnerabilities dubbed 'BadAlloc', disclosed by Microsoft on April 29, 2021. The impact of a successful exploitation of the vulnerabilities may result in denial of service, or remote code execution, de…
first Nov 9, 2021 -
Critical
Wind River VxWorks DHCP Server Vulnerability
Schneider Electric is aware of a vulnerability within the VxWorks Operating System from Wind River. Many vendors, including Schneider Electric, embed VxWorks in their offers. If successfully exploited, these vulnerabilities could result in loss of confidentia…
first Jan 14, 2025 -
Critical max 9.5SEVD-2025-189-01 6 CVEs
EcoStruxure™ IT Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ IT Data Center Expert (DCE) product. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device informa…
-
Medium max 6.9
System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…
-
Medium max 6.5
Modicon Controllers M241/M251/M258/LMC058/M262
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M241 / M251 / M258 / LMC058 / M262 products. The Modicon Controllers M241/M251/M258/M262 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and M…
first Jun 10, 2025 -
High max 7.2
EVLink WallBox
Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product. The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suita…
first Jun 10, 2025 -
Medium max 5.3SEVD-2025-189-04 1 CVE
EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) with Advanced Reporting and Dashboards
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitor…
-
High max 7.8
Vijeo Designer
Schneider Electric is aware of a vulnerability in its Vijeo Designer product. The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Desi…
first Sep 10, 2024 -
UnscoredSEVD-2025-161-01 0 CVEs
Insight Home and Insight Facility
Schneider Electric is aware of a vulnerability in a third-party Real-Time Operating System (RTOS) component utilized in the Insight Home and Insight Facility products. The Insight Home https://www.se.com/ww/en/product/865-0330/insighthome-smart-edge-device-fo…
-
Critical
Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their communication modules. The Modicon Ethernet Programmable Automation products are controllers for industrial proce…
first Oct 13, 2020 -
UnscoredSEVD-2025-133-02 0 CVEs
Wiser Home Automation
Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products. The Wiser AvatarOn 6K Freelocate https://www.se.com/sg/en/product/E8334RWMZB_WE/wiser…
-
High max 7.8
ConneXium Network Manager Software
Schneider Electric is aware of vulnerabilities in its ConneXium Network Manager software. The ConneXium Network Manager software provides a solution for configuring and monitoring the administrable Schneider Electric devices, including switches, routers, fire…
first Apr 8, 2025 -
Medium max 4.6
EcoStruxure™ Power Build Rapsody
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Build Rapsody software. The EcoStruxure™ Power Build Rapsody is used to enter or import the single line diagram, to get the extensive bill of material of your switchboard, including all …
first Jan 14, 2025 -
UnscoredSEVD-2025-133-04 0 CVEs
Schneider Electric PrismaSeT Active - Wireless Panel Server
Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the PrismaSet Active - Wireless Panel Server. The PrismaSeT Active - Wireless Panel Server https://www.se.com/ww/en/product-range/39982243-prismaset-p-active…
-
Medium max 4.6SEVD-2025-133-03 1 CVE
EcoStruxure Power Build Rapsody
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Build Rapsody software. EcoStruxure Power Build Rapsody product is used to enter or import the single line diagram, to get the extensive bill of material of switchboards, including all d…