Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
294 results · Feed
-
High max 7.3
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) product. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitoring-expert/#overview is an on-premises s…
first Oct 8, 2024 -
High max 7.5
Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC
Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers) https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/?parent-subcategory-id=3950&filter=business-1-industrial-automation-and-control#products , …
first Jan 14, 2025 -
Medium max 6.8SEVD-2025-098-02 3 CVEs
Trio™ Q Licensed Data Radios
Schneider Electric is aware of a vulnerability in its Trio™ Q Licensed Data Radio product. The Trio Q Licensed Data Radios product is an advanced, high-speed licensed digital data radios, providing both Ethernet and serial communications for complex and deman…
-
Medium max 6.8SEVD-2025-070-02 1 CVE
EPAS-UI & EcoSUI
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Automation System User Interface (EPAS-UI) product. The EcoStruxure Power Automation System User Interface (EPAS-UI) https://www.se.com/ng/en/product-range/61456-ecostruxure-power-automa…
-
Critical max 9.8SEVD-2025-070-03 1 CVE
WebHMI Component For EcoStruxure™ Power Automation System User Interface and EcoStruxure™ Microgrid Operation Large
Schneider Electric is aware of a vulnerability in its WebHMI component used in EcoStruxure™ Power Automation System User Interface product and EcoStruxure™ Microgrid Operation Large (EMO-L) solution. EcoStruxure™ Power Automation System User Interface https:/…
-
Medium max 6.0SEVD-2025-070-01 1 CVE
EcoStruxure™ Panel Server
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Panel Server product, all models. The EcoStruxure™ Panel Server https://www.se.com/us/en/product-range/40739468-ecostruxure-panel-server/#products is a modular gateway with enhanced cybersecur…
-
Medium max 6.5SEVD-2025-042-04 3 CVEs
Enerlin'X IFE and eIFE
Schneider Electric is aware of vulnerabilities in its Enerlin'X IFE and Enerlin'X eIFE products. The Enerlin'X IFE and eIFE products https://www.se.com/ww/en/product-range/62413-enerlinx-ife-eife-ifm/#products are used to enable Masterpact, PowerPact, and Com…
-
High max 8.1SEVD-2025-042-01 4 CVEs
ASCO 5310 / 5350 Remote Annunciator
Schneider Electric is aware of multiple vulnerabilities in its ASCO 5310 Remote Annunciator and ASCO 5350 Remote Annunciator products. The ASCO 5310 Remote Annunciator and ASCO 5350 Remote Annunciator products are stand-alone, industrial grade interface devic…
-
High max 8.8SEVD-2025-014-08 2 CVEs
Power Logic HDPM6000 High-Density Metering System
Schneider Electric is aware of multiple vulnerabilities in its Power Logic HDPM6000 High-Density Metering System product. The HDPM6000 products are high-density, multi-circuit busway and panelboard power meters for cost and network management in large and cri…
-
High max 7.8SEVD-2025-014-04 1 CVE
Web Designer for Modicon Communication Modules
Schneider Electric is aware of a vulnerability in its Web Designer configuration tool for the following FactoryCast modules: • BMXNOR0200H • BMXNOE0110(H) • BMENOC0311(C) • BMENOC0321(C) The Web Designer product is a software application used to create Web-ba…
-
High max 8.8SEVD-2024-345-02 1 CVE
Harmony HMI and Pro-face HMI products
Schneider Electric is aware of a vulnerability in its Harmony HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 products used with EcoStruxure™ Operator Terminal Expert Software and PFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 products used with Pro-face BLUE Software.…
-
Medium max 5.3SEVD-2024-345-01 1 CVE
PowerChute Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and worksta…
-
Critical max 9.8SEVD-2024-317-04 1 CVE
EcoStruxure™ IT Gateway
Customers should use appropriate methodologies when updating their systems. We strongly recommend the use of backups and evaluating the impact of the software update in a Test and Development environment or on an offline infrastructure. Contact Schneider Elec…
-
High max 7.5SEVD-2024-317-01 1 CVE
PowerLogic PM5300 Series
Note - PM5310 and PM5330 are not impacted because they use serial communication infrastructure and donot have an Ethernet stack.
-
High max 9.8
PowerLogic PM5500 and PowerLogic PM8ECC
Overview Schneider Electric is aware of a vulnerability in its PowerLogic PM55xx and PowerLogic PM8ECC products. The PowerLogic PM55xx products are power metering devices. The PowerLogic PM8ECC product is an ethernet communication module. Failure to apply the…
first Jun 8, 2021 -
Critical max 9.8SEVD-2024-282-07 1 CVE
System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC Series and Pro-face PS5000 trusted Legacy industrial PC Series product(s). The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Seri…
-
High max 7.8SEVD-2024-282-06 2 CVEs
Zelio Soft 2
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
High max 7.8SEVD-2024-282-03 1 CVE
Easergy Studio
Schneider Electric is aware of a vulnerability in its Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the remediation provided below may risk unauthorized ac…
-
UnscoredSEVD-2024-282-08 0 CVEs
EcoStruxure EV Charging Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System) product operating system (OS). The EcoStruxure EV Charging Expert product is load management, access management and…
-
UnscoredSEVD-2024-282-02 0 CVEs
Harmony iPC – HMIBSC IIoT Edge Box Core
Schneider Electric is aware of multiple vulnerabilities in its Harmony iPC – HMIBSC IIoT Edge Box Core family products operating system (OS). The Harmony iPC – HMIBSC IIoT Edge Box Core products are edge compute products, which enable secure communication fro…
-
High max 8.5SEVD-2024-282-04 1 CVE
EVlink Home Smart and Schneider Charge
Schneider Electric is aware of a vulnerability with the potential disclosure of confidential information in its EVlink Home Smart and Schneider Charge charging stations. This is not related to any of the customer personal data and potential disclosure cannot …
-
High max 7.2SEVD-2024-282-01 2 CVEs
Data Center Expert
Schneider Electric is aware of a vulnerability in its Data Center Expert product. The Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipmen…
-
High max 7.5
Modicon M340 Controller and Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340 Controller and Communication Modules. The Modicon M340 offers compactness, flexibility, scalability, and robustness for the process industry and a wide range of demanding automation applicatio…
first Apr 12, 2022 -
Medium max 5.4SEVD-2024-254-02 1 CVE
EcoStruxure™ Power Monitoring Expert and EcoStruxure™ Power Operation or EcoStruxure™ Power SCADA Operation with Advanced Reporting and Dashboards
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power. critical and energy-int…
-
Medium max 6.1
PowerLogic P5
Schneider Electric is aware of a vulnerability in its PowerLogic P5 products. The PowerLogic P5 is a medium voltage protection relay. Failure to apply the mitigations provided below may risk denial of service, device reboot, or an attacker gaining full contro…
first Jun 11, 2024 -
Medium max 6.7
EcoStruxure™ Power Monitoring Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert product (PME). EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power-critical and energy-intensive facilities maximize uptime and ope…
first Mar 14, 2023 -
Medium max 5.5
EcoStruxure™ OPC UA Server Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ OPC UA Server Expert product. EcoStruxure™ OPC UA Server Expert is a communications platform seamlessly linking Schneider Electric PLCs and connected devices to enterprise information syst…
first Jul 11, 2023 -
High max 7.3SEVD-2024-226-02 1 CVE
EcoStruxure™ Machine SCADA Expert / BLUE Open Studio
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure™ Machine SCADA Expert and BLUE Open Studio products. The EcoStruxure™ Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedica…
-
High max 7.5SEVD-2024-226-01 1 CVE
Accutech Manager
Schneider Electric is aware of a vulnerability in its Accutech Manager software. The Accutech Manager software is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk in r…
-
High max 7.5
Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers)
Schneider Electric is aware of multiple vulnerabilities in its Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers). Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control a…
first Apr 11, 2023 -
High max 7.5
EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers)
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers). Modicon PLCs (Programmable Logic Control…
first Jan 10, 2023 -
Critical max 9.8
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, and Modicon Controllers M580 and M340
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert, and Modicon M580 and M340 control products. Failure to apply the remediations provided below may risk a bypass of access controls in place, which …
first Aug 9, 2022 -
High max 7.5
Modicon PAC Controllers
Schneider Electric is aware of a vulnerability in its Modicon PAC Controllers. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and pr…
first Aug 9, 2022 -
High max 7.5
Modicon PAC Controllers
Schneider Electric is aware of a vulnerability in its Modicon PAC Controllers. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient and pro…
first Aug 9, 2022 -
Medium max 6.5
Modicon PAC Controllers and PLC Simulator for EcoStruxure™ Control Expert and EcoStruxure™ Process Expert
Schneider Electric is aware of multiple vulnerabilities in the Modicon PAC Controllers and PLC simulator included in EcoStruxure™ Control Expert and EcoStruxure™ Process Expert. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation C…
first Aug 10, 2021 -
Critical max 7.3
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ x70, and Modicon Controllers M580 and M340
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ x70, and Modicon M580 and M340 control products. These vulnerabilities pose several risks, primary among these i…
first Jul 13, 2021 -
Medium
Modicon Controllers
Schneider Electric is aware of multiple vulnerabilities in the Modicon Controller products. March 2023 Update: Remediation for the Modicon M580 CPU is available for download
first Sep 26, 2019 -
High
Embedded FTP Servers for Modicon PAC Controllers
Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. O…
first Mar 22, 2018 -
Critical max 9.8
SAGE RTU
Schneider Electric is aware of multiple vulnerabilities in its SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform. Failure to apply …
first Jun 11, 2024 -
High max 7.3SEVD-2024-191-03 1 CVE
EcoStruxure Foxboro SCADA FoxRTU Station
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SC…