Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
294 results · Feed
-
High max 8.8SEVD-2023-073-04 8 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Server, Dashboard and Custom Reports modules for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling…
-
Critical max 9.8SEVD-2023-073-02 1 CVE
PowerLogic™ HDPM6000
Schneider Electric is aware of a vulnerability in its PowerLogic™ HDPM6000 products. The PowerLogic™ HDPM6000 products are high density, multi-circuit busway and panelboard power meters. Failure to apply the mitigation provided below may risk a buffer overflo…
-
Critical max 9.1
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Geo SCADA Expert software product, formerly known as ClearSCADA. The EcoStruxure Geo SCADA Expert product is an open, flexible and scalable software for telemetry and remote SCADA solu…
first Jan 10, 2023 -
Critical max 9.8
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Server module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a SCADA system used for monitoring and controlling industrial processes. The Data Server is a modu…
first Jun 14, 2022 -
High max 7.5
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Premium and Associated Communication Modules
Schneider Electric is aware of multiple vulnerabilities in the web server component of the Modicon M340 PLC. In addition, the Modicon Quantum and Modicon Premium Legacy offers, and associated communication modules are affected. The Modicon Ethernet Programmab…
first Sep 14, 2021 -
Medium max 6.3
Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules
Schneider Electric is aware of multiple vulnerabilities in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their communication modules. The Modicon Ethernet Programmable Automation products are controllers for industr…
first Nov 10, 2020 -
High max 8.8SEVD-2023-045-02 9 CVEs
StruxureWare Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert product. The StruxureWare Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providi…
-
High max 8.3SEVD-2023-045-03 1 CVE
Merten KNX devices
Schneider Electric is aware of a vulnerability in its Merten KNX products. The Merten KNX products in the table below are home automation products for lighting and temperature control. Failure to apply the mitigations provided below may risk an authentication…
-
High max 7.6
NetBotz 4 - 355/450/455/550/570
Schneider Electric is aware of multiple vulnerabilities in its NetBotz 4 - 355/450/455/550/570 products. The NetBotz 4 - 355/450/455/550/570 products are security and environmental monitors providing temperature, humidity, leak, smoke, vibration, door contact…
first Nov 8, 2022 -
Medium max 5.3SEVD-2023-045-01 1 CVE
EcoStruxureTM Geo SCADA Expert
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Geo SCADA Expert software product, formerly known as ClearSCADA. The EcoStruxureTM Geo SCADA Expert product is an open, flexible and scalable software for telemetry and remote SCADA solutions…
-
Critical max 9.8
APC Easy UPS Online Monitoring Software
Schneider Electric is aware of multiple vulnerabilities in its APC Easy UPS Online Monitoring Software. The APC Easy UPS Online Monitoring Software is used to configure and manage APC Easy UPS. Failure to apply the remediations provided below may risk remote …
first Dec 13, 2022 -
High max 7.5SEVD-2023-010-03 1 CVE
EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Operation and Power SCADA Operation software EcoStruxure™ Power Operation and EcoStructure™ Power SCADA Operation are on-premises software offers that provides a single platform to monit…
-
High max 7.4SEVD-2023-010-04 1 CVE
EcoStruxure™ Power SCADA Anywhere
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power SCADA Anywhere product. EcoStruxure™ Power SCADA Anywhere is an on-premises software that provides remote web browser access to the EcoStruxure Power Operation desktop HMI client applica…
-
Medium max 4.3SEVD-2023-010-01 1 CVE
EcoStruxureTM Machine Expert – HVAC (formerly SoMachine - HVAC)
Schneider Electric is aware of a vulnerability in EcoStruxureTM Machine Expert - HVAC (formerly SoMachine - HVAC). The EcoStruxureTM Machine Expert - HVAC is a commissioning software for programmable logic controllers M171/M172. The EcoStruxureTM Machine Expe…
-
High max 7.8SEVD-2022-347-03 1 CVE
EcoStruxure Power Commission
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Commission software product. The EcoStruxure Power Commission software is an intelligent software that helps you easily set up, test, and commission the electrical products and s…
-
MediumSEVD-2022-347-02 1 CVE
Saitel DR RTU
Schneider Electric is aware of a vulnerability in the Triangle MicroWorks DNP3 Outstation Libraries used in the Saitel DR RTU (Remote Terminal Unit). The SAITEL DR RTU is a field device, offering a solid and powerful platform for data acquisition, communicati…
-
High max 7.8
C-Bus Toolkit and C-Gate Server
Schneider Electric is aware of multiple vulnerabilities in its C-Bus Toolkit and C-Gate server products. The C-Bus Toolkit product, which includes C-Gate Server, is an application you run on your personal computer to configure and commission C-Bus Installatio…
first Apr 13, 2021 -
High
homeLYnk (Wiser For KNX) and spaceLYnk
Schneider Electric is aware of multiple vulnerabilities in its homeLYnk (Wiser For KNX) and spaceLYnk products. HomeLYnk (Wiser for KNX) products are personalized energy efficiency solutions, offering a complete system based on open protocols: KNX, Modbus, BA…
first May 11, 2021 -
High
EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Operation and Power SCADA Operation software. EcoStruxure™ Power Operation and EcoStructure™ Power SCADA Operation are on-premises software offers that provides a single platform to moni…
first Oct 11, 2022 -
HighSEVD-2022-284-02 2 CVEs
EcoStruxure™ Panel Server Box (PAS900)
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Panel Server Box (PAS900) product. The EcoStruxure™ Panel Server Box (PAS900) product is a cloud connected gateway with 4G/WIFI/Ethernet that supports Modbus TCP/RTU for south communication. F…
-
High max 7.0SEVD-2022-284-01 6 CVEs
EcoStruxure™ Operator Terminal Expert and Pro-face BLUE
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI des…
-
High
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and Associated Communication Modules
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and associated communication modules. The Modicon Ethernet Programmable Automation controller products are controllers for …
first Dec 8, 2020 -
High
SNMP Service on Modicon M340 and Associated Communication Modules
Schneider Electric is aware of a vulnerability in the Modicon M340 offer and associated communication modules. Modicon M340 Programable Automation Controllers are used in industrial processes and infrastructure control. Failure to apply the remediations provi…
first Dec 8, 2020 -
HighSEVD-2022-256-01 0 CVEs
EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. EcoStruxure Machine SCADA Expert is a powerful software for developing HMI, SCADA, OEE and Dashboard projects dedicated to …
-
Unscored
Wind River VxWorks Vulnerabilities (URGENT/11)
Wind River's VxWorks TCP/IP Stack vulnerabilities have wide-ranging impact across multiple IT and industrial applications. We are working closely with Wind River to understand and assess how these vulnerabilities impact Schneider Electric offers and our custo…
first Aug 2, 2019 -
High max 7.5
OPC UA and X80 advanced RTU Modicon Communication Modules
Schneider Electric is aware of multiple vulnerabilities in its BMENUA0100 - OPC UA module and BMENOR2200H X80 advanced RTU communication module for M580. The BMENUA0100 - OPC UA module for M580 is an Ethernet communications module with an embedded OPC UA serv…
first Jul 12, 2022 -
Unscored max 10.0
Apache Log4j Vulnerabilities (Log4Shell)
Schneider Electric is aware of the vulnerabilities impacting Apache Log4j, including CVE-2021-44228, also known as Log4Shell. Our cybersecurity team is actively investigating the impact of the vulnerability on Schneider Electric offers and will continuously u…
first Dec 13, 2021 -
Medium max 5.5SEVD-2022-221-03 1 CVE
EcoStruxure™ Control Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert product. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon M340, M580, M580S, Premium, Momentum and Quantum ranges. Failure to …
-
Unscored max 9.8
Treck TCP/IP Vulnerabilities (Ripple20)
Schneider Electric is aware of multiple vulnerabilities affecting Treck Inc.’s embedded TCP/IP stack, collectively known as Ripple20, which Treck disclosed publicly on June 16. The vulnerabilities range in severity and therefore have varying levels of risk. S…
first Jun 23, 2020 -
Medium max 6.8SEVD-2022-193-03 1 CVE
Acti9 PowerTag Link C
Schneider Electric is aware of a vulnerability in its Acti9 PowerTag Link C product. The Acti9 PowerTag Link C is the simplest and most efficient way to achieve a fully connected panel. Failure to apply the remediation provided below may risk an improper acce…
-
High max 8.8SEVD-2022-193-02 1 CVE
SpaceLogic C-Bus Home Controller, formerly known as C-Bus Wiser Home Controller MK2
Schneider Electric is aware of a vulnerability in the SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Homer Controller MK2. The SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Home Controller MK2 is a home…
-
High max 7.8
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ for x70 software products. EcoStruxure™ Control Expert is the common programming, debugging and operating softwar…
first Sep 14, 2021 -
Unscored max 8.1
AT&T Labs Compressor (XMilI) and Decompressor (XDemill) used by EcoStruxureTM Control Expert, EcoStruxureTM Process Expert and SCADAPack RemoteConnect™ for x70
Schneider Electric is aware of multiple vulnerabilities on AT&T Labs’ Compressor (XMilI) and decompressor (XDemill) third party components used by EcoStruxure Control Expert, EcoStruxure Process Expert and SCADAPack RemoteConnect™ for x70. Failure to apply th…
first Aug 1, 2021 -
High max 8.8SEVD-2022-193-04 3 CVEs
Easergy P5
Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device’s credentials, denia…
-
Critical max 9.8
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of a vulnerability in its Data Server module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The Data Server i…
first Apr 12, 2022 -
Critical max 8.9
APC Smart-UPS SMT, SMC, SMX, SCL, SRC, XU, XP, CSH2, SURTD, SMTL, SRT, and select SRTL Series
Schneider Electric is aware of the vulnerabilities associated with APC Smart-UPS uninterruptable power supply devices which, if compromised, may allow for potential unauthorized access and control of the device. Upon learning of these vulnerabilities, we work…
first Mar 8, 2022 -
Medium max 5.3
EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ for x70 software products. EcoStruxure™ Control Expert is the common programming, debugging and operating softwar…
first Mar 8, 2022 -
Medium max 4.8SEVD-2022-165-02 1 CVE
Geo SCADA Mobile
Schneider Electric is aware of a vulnerability in its EcoStruxure Geo SCADA Mobile product. The Geo SCADA Mobile product is an Android mobile app which provides remote access to data within a Geo SCADA Expert system when used via the optional Geo SCADA Mobile…
-
Medium max 6.5SEVD-2022-165-05 3 CVEs
EcoStruxure Power Commission
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Commission software. The EcoStruxure Power Commission software is comprehensive software to provide strong function for setup, test and commission for low voltage power distribut…
-
High max 8.0SEVD-2022-165-08 2 CVEs
EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Cybersecurity Admin Expert product. The EcoStruxure™ Cybersecurity Admin Expert product (CAE) is a solution for managing cybersecurity in an electrical network’s operational technolog…