Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
294 results · Feed
-
High max 7.8SEVD-2024-191-02 3 CVEs
EcoStruxureTM Foxboro DCS Core Control Services
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product. The EcoStruxureTM Foxboro DCS product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and…
-
Critical max 9.8SEVD-2024-191-01 1 CVE
Wiser Home Controller WHC-5918A
Schneider Electric is aware of a vulnerability in its Wiser Home Controller WHC-5918A product. The Wiser Home Controller WHC-5918A, a C-Bus based home automation controller, was discontinued on December 31, 2015. Failure to apply the mitigations provided belo…
-
Medium max 6.5SEVD-2024-163-03 1 CVE
EVlink Home Smart
Schneider Electric is aware of a vulnerability with the existence of a non-disabled SSH interface in its EVlink Home Smart charging station. The EVlink Home Smart charging stations EV charging stations for the residential market. Failure to follow the remedia…
-
Medium max 6.4SEVD-2024-163-04 2 CVEs
SpaceLogic AS-P and AS-B Automation Servers
Schneider Electric is aware of multiple vulnerabilities in its SpaceLogic AS-P and AS-B products. The SpaceLogic AS-P system controller performs key functionality: control logic, trend logging & alarm supervision, and supports communication & connectivity to …
-
Critical max 9.8
Easy UPS Online Monitoring Software
Schneider Electric is aware of multiple vulnerabilities in its Easy UPS Online Monitoring Software, known as APC Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Soft…
first Apr 11, 2023 -
High max 7.8SEVD-2024-100-01 1 CVE
Easergy Studio
Schneider Electric is aware of a vulnerability in its Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the provided remediation below may risk unquoted search…
-
High max 8.2
Trio™ Licensed and License-free Data Radios
Schneider Electric is aware of multiple vulnerabilities in its Trio Licensed and License-Free Data Radio products. The Trio Licensed Radio products are designed to provide complete, versatile, and high availability system solutions for long range wireless dat…
first Dec 12, 2023 -
Medium max 5.3
Galaxy VS and Galaxy VL
Schneider Electric is aware of a vulnerability in its Galaxy VL and Galaxy VS products. The Schneider Electric Galaxy VS products are 3-phase UPS for edge, small, and medium data centers and other business-critical applications. The Schneider Electric Galaxy …
first Nov 14, 2023 -
Critical max 9.8SEVD-2024-072-01 3 CVEs
Easergy T200 Multiple Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities in its Easergy T200 products. The Easergy T200 RTU Product Line (T200I, T200E, T200P) is a modular platform for medium voltage and low voltage public distribution network management. Note, this product h…
-
High max 7.8SEVD-2024-072-02 1 CVE
EcoStruxure Power Design - Ecodial
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Design - Ecodial product. The EcoStruxure Power Design - Ecodial product is a software that helps optimize equipment and costs while managing operating specifications, all along with the …
-
High max 7.8SEVD-2024-044-03 1 CVE
EcoStruxure IT Gateway
Schneider Electric is aware of a vulnerability in its EcoStruxure IT Gateway product. EcoStruxure IT Gateway product is software that handles communication with your monitored devices, gathering and sending device data for smart alarm notification. Failure to…
-
High max 8.8SEVD-2024-044-02 1 CVE
Harmony Relay NFC
Schneider Electric is aware of a vulnerability in its Harmony Relay NFC products. The Harmony Control Relay and Harmony Timer Relay products are 8A multifunction 3-phase control and modular timing relays. Failure to apply the mitigations provided below may ri…
-
High max 7.8SEVD-2024-009-02 1 CVE
Easergy Studio
Schneider Electric is aware of a vulnerability in our Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the remediations provided below may risk an attacker wi…
-
High max 8.8
CODESYS Runtime Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS Runtime. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a denial of service or, in some c…
first Apr 11, 2023 -
High max 8.8
EcoStruxure™ Control Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert product. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon PLCs (Programmable Logic Controllers) and PACs (Programmab…
first Apr 11, 2023 -
High max 6.5
Harmony (formerly known as Magelis) HMI Panels
Schneider Electric is aware of a vulnerability in the Harmony (formerly known as Magelis) HMI Panel products. Harmony HMI Panels are the main visible automation component that manage all vital machine features, including visualization, control, supervision, d…
first Aug 13, 2019 -
Critical max 10.0
ProLeiT Plant iT/Brewmaxx
Schneider Electric is aware of a vulnerability in Redis open-source database, affecting its Plant iT product. The Plant iT/Brewmaxx product is an object-oriented and PLC-based process control system with integrated Manufacturing Execution System functionality…
-
High max 7.2
PowerLogic ION8650, PowerLogic ION8800
Schneider Electric is aware of multiple vulnerabilities in its PowerLogic ION8650 and PowerLogic ION8800 products. The PowerLogic products are revenue and power quality meters for utility electrical network monitoring. Failure to apply the mitigations provide…
first Nov 14, 2023 -
Medium max 5.3SEVD-2023-346-03 1 CVE
Easy UPS Online Monitoring Software
Schneider Electric is aware of a vulnerability in its Easy UPS Online Monitoring Software, known as Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China…
-
High max 8.2SEVD-2023-318-02 2 CVEs
EcoStruxure Power Monitoring Expert and EcoStruxure™ Power Operation with Advanced Reporting and Dashboards Module
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Power Monitoring Expert (PME) product, EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module. EcoStruxure™ Power M…
-
Critical max 9.8SEVD-2023-283-02 1 CVE
EcoStruxure Power Monitoring Expert and EcoStruxure™ Power
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive …
-
Critical max 9.8SEVD-2023-283-01 2 CVEs
SpaceLogic C-Bus Toolkit
Schneider Electric is aware of multiple vulnerabilities in its SpaceLogic C-Bus Toolkit products. The SpaceLogic C-Bus Toolkit product is an application run on a personal computer to configure and commission C-Bus installations. Failure to apply the remediati…
-
High max 7.8SEVD-2023-255-01 1 CVE
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of a vulnerability in its Update Service for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The IGSS Update S…
-
Medium max 5.3SEVD-2023-220-01 1 CVE
Pro-face GP-Pro EX
Schneider Electric is aware of a vulnerability in its Pro-face GP-Pro EX product. The Pro-face GP-Pro EX product is an HMI Screen Editor & Logic Programming Software. The affected module is WinGP, which is the HMI runtime that enable HMI project execution on …
-
High max 8.8SEVD-2023-192-01 4 CVEs
StruxureWare Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert (DCE) product. This product was recently renamed to EcoStruxure™ IT Data Center Expert. EcoStruxure™ IT Data Center Expert is a scalable monitoring software tha…
-
High max 7.8SEVD-2023-192-03 1 CVE
Accutech Manager
Schneider Electric is aware of a vulnerability in its Accutech Manager product. Accutech Manager is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk local privile…
-
UnscoredSEVD-2023-164-03 0 CVEs
Foxboro SCADA
Schneider Electric is aware of a vulnerability in the AVEVA™ InTouch component which is included as part of Foxboro SCADA product. The Foxboro SCADA product is a software package that helps provide SCADA remote communications in the most demanding application…
-
High max 7.8SEVD-2023-164-02 1 CVE
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of a vulnerability in its Dashboard module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a SCADA system used for monitoring and controlling industrial processes. The Dashboard access data of the SCA…
-
High max 7.8SEVD-2023-164-04 2 CVEs
EcoStruxureTM Foxboro DCS Control Core Services
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The DCS component impacted is the Control Core Services package. The EcoStruxureTM Foxboro…
-
High max 7.8SEVD-2023-164-01 1 CVE
EcoStruxure™ Operator Terminal Expert and Pro-face BLUE
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI designs. Fai…
-
Medium max 5.0SEVD-2023-129-01 1 CVE
OPC Factory Server
Schneider Electric is aware of a vulnerability in its OPC Factory Server (OFS). OPC Factory Server (OFS) is a standards compliant server application allowing open, real-time access to Schneider Electric automation and electrical distribution devices connected…
-
High max 8.8SEVD-2023-129-03 1 CVE
PowerLogic ION7400 / PM8000 / ION9000 Power Meters
Schneider Electric is aware of the use of an unsecure protocol in its PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, PowerLogic ION8800 and all legacy ION products. The PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000,…
-
UnscoredSEVD-2023-129-02 0 CVEs
EcoStruxure™ Power SCADA Operation
Schneider Electric is aware of multiple vulnerabilities in the AVEVA™ Plant SCADA product which is included as part of EcoStruxure™ Power Operation, EcoStruxure™ Power SCADA Operation products. EcoStruxure™ Power Operation and EcoStruxure™ Power SCADA Operati…
-
UnscoredSEVD-2023-129-04 0 CVEs
Power SCADA Anywhere
Schneider Electric is aware of multiple vulnerabilities in the AVEVA™ Plant SCADA Access Anywhere which is an optional component of the EcoStruxureTM Power Operation or EcoStruxureTM Power SCADA Operation products. EcoStruxureTM Power SCADA Anywhere is a web …
-
Unscored
NicheStack TCP/IP Vulnerabilities (INFRA:HALT) in Lexium ILE, ILA, ILS, and Communication Option Boards for Altivar and Lexium32 drives
Schneider Electric is aware of multiple vulnerabilities in HCC Embedded’s NicheStack TCP/IP third party component, which is integrated into Schneider Electric’s Lexium ILE, ILA, ILS, Altivar Profinet Communication Module (VW3A3627), Altivar and Lexium Etherne…
first Aug 5, 2021 -
Medium max 6.3SEVD-2023-101-06 1 CVE
Easergy Builder
Schneider Electric is aware of a vulnerability in its Easergy Builder installer. Easergy Builder is a configuration tool that supports Easergy T300, Saitel DR and Saitel DP. This vulnerability is only exploitable during the installation process and will not i…
-
High max 7.2SEVD-2023-101-02 1 CVE
Conext™ Gateway/ InsightHome and InsightFacility
Schneider Electric is aware of a vulnerability in its Conext™ Gateway/ InsightHome and InsightFacility products. The InsightHome and InsightFacility products are smart edge devices that connect customers’ Schneider Electric solar and storage systems to the In…
-
Medium max 5.5
SCADAPack Workbench
Schneider Electric is aware of a vulnerability in its SCADAPack Workbench product. SCADAPack Workbench is a programming and configuration tool for SCADAPack 300E RTUs and SCADAPack 500E RTUs. Failure to apply the mitigations provided below may risk informatio…
first Mar 28, 2022 -
Critical max 9.8
CODESYS V3 Runtime, Development System, and Gateway Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V3 Runtime, Development System and Gateway. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities cou…
first Jan 11, 2022 -
Critical
PLC Simulator on EcoStruxure™ Control Expert and Process Expert
Schneider Electric is aware of multiple vulnerabilities in its PLC Simulator for EcoStruxure™ Control Expert product. PLC Simulator feature is part of the EcostruxureTM Control Expert and EcostruxureTM Process Expert software and it helps users to review and …
first Nov 10, 2020