Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
294 results · Feed
-
High max 8.6SEVD-2022-165-03 3 CVEs
Conext™ Combox
Schneider Electric is aware of multiple vulnerabilities in its Conext™ ComBox product which was discontinued in January 2020 and is no longer in support. The Conext™ ComBox is a communication and monitoring device for installers and operators of Conext solar …
-
Critical max 9.8SEVD-2022-165-06 2 CVEs
Schneider Electric C-Bus Home Automation Products
Schneider Electric is aware of multiple vulnerabilities in the Schneider Electric C-Bus Home Automation products listed below. The Schneider Electric C-Bus Home Automation products are fully integrated systems that can control and automate lighting and many o…
-
Medium max 5.3SEVD-2022-165-07 1 CVE
CanBRASS
Schneider Electric is aware of a vulnerability in its CanBRASS product. The CanBRASS product (https://www.se.com/ww/en/product-range/61293-canbrass/#software-and-firmware) is a design and costing tool for Canalis busbar trunking runs. Failure to apply the rem…
-
High max 8.0
Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its Data Center Expert product. The Data Center Expert product provides an efficient way for organizations to monitor and manage their company-wide multi-vendor physical infrastructure, including powe…
-
High
EcoStruxure Power Build - Rapsody
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotatio…
first Jan 12, 2021 -
High max 8.0SEVD-2022-130-01 1 CVE
PowerLogic ION Setup
Schneider Electric is aware of a vulnerability in its PowerLogic ION Setup product. The PowerLogic ION Setup product is an engineering tool for configuration and maintenance of PowerLogic metering devices. Failure to apply the remediations provided below may …
-
MediumSEVD-2022-130-02 1 CVE
Saitel DP RTU
Schneider Electric is aware of a vulnerability in the Triangle MicroWorks DNP3 Outstation Libraries used in the Saitel DP RTU (Remote Terminal Unit). The Saitel DP RTU (Remote Terminal Unit) is a modular platform for medium voltage and low voltage public dist…
-
Critical max 9.4SEVD-2022-130-03 6 CVEs
Wiser Smart
Schneider Electric is aware of multiple vulnerabilities in its Wiser Smart products. The Wiser Smart [EER21000 and EER21001] products is a home automation system which reports your energy consumption and controls the most energy consuming devices. Failure to …
-
Medium
APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices
Schneider Electric is aware of multiple vulnerabilities in its products that use the Network Management Card 2 (NMC2), Network Management Card 3 (NMC3), and the NMC embedded devices. The NMC2 and the NMC3 cards and embedded devices allow for secure monitoring…
first Nov 9, 2021 -
Critical
spaceLYnk, Wiser For KNX, fellerLYnk
Schneider Electric is aware of multiple vulnerabilities in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility, and simplifies building managem…
first Feb 8, 2022 -
High max 8.8SEVD-2022-067-03 1 CVE
Ritto Wiser™ Door
Schneider Electric is aware of a vulnerability impacting its Ritto Wiser™ Door product. The Ritto Wiser™ Door provides convenient door communication: stationary via the highresolution, large-format panel or gateway in the sub-distribution and mobile via an ap…
-
High
Windows Print Spooler embedded in EcoStruxure™ Process Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert product. The EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market…
first Nov 9, 2021 -
High
Easergy P5
Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device credentials, denial …
first Jan 11, 2022 -
HighSEVD-2022-039-06 1 CVE
Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic
Schneider Electric is aware of a vulnerability in Harmony/Magelis iPC Series HMI, Vijeo Designer and Vijeo Designer Basic. The Harmony/Magelis iPC Series HMI products are configured by Vijeo Designer software. Vijeo Designer and Vijeo Designer Basic are softw…
-
HighSEVD-2022-039-03 1 CVE
Easergy P40
Schneider Electric is aware of multiple vulnerabilities in its Easergy P40 product line. The Easergy P40 is a protection relay series for MV, HV and EHV protection. Failure to apply the mitigation provided below may risk disclosure of device credentials, loss…
-
MediumSEVD-2022-039-05 4 CVEs
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Geo SCADA Expert product (formerly known as ClearSCADA). EcoStruxure Geo SCADA Expert software is an open, flexible, and scalable software system for telemetry and remote SCADA solutio…
-
High
EcoStruxure EV Charging Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System) products. The EcoStruxure EV Charging Expert products are load management, access management and supervision soluti…
-
CriticalSEVD-2022-039-01 8 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in the IGSS (Interactive Graphical SCADA System) Data Server module. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The Data Server is a mod…
-
High max 7.5SEVD-2022-011-07 4 CVEs
EcoStruxure™ Power Monitoring Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Power Monitoring Expert product (PME). EcoStruxure Power Monitoring Expert is on-premise software used to help power-critical and energy-intensive facilities maximize uptime and opera…
-
High max 7.5SEVD-2022-011-05 6 CVEs
ConneXium Tofino Firewall and Loadable Security Modules
Schneider Electric is aware of multiple vulnerabilities in its ConneXium Tofino Firewall products, and associated Loadable Security Modules (LSM) Connexium Tofino Firewall and LSM products are part of the ConneXium Tofino Industrial Security Solution providin…
-
HighSEVD-2022-011-04 1 CVE
Easergy P3
Schneider Electric is aware of a vulnerability in its Easergy P3 products. The Easergy P3 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below could lead to communications loss, device reboot, or at attacker ga…
-
Medium max 9.8SEVD-2022-011-02 1 CVE
Easergy T300
Schneider Electric is aware of a vulnerability in the Easergy T300 RTU (Remote Terminal Unit). The Easergy T300 is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the mitigations provided below ma…
-
High max 7.1SEVD-2022-011-01 2 CVEs
Ethernet and Web server on Modicon M340 controller and Communication Modules
Schneider Electric is aware of multiple vulnerabilities in its Modicon M340 controller and Communication Modules. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. The Modicon M340 offers compactn…
-
Medium max 8.0
APC by Schneider Electric Rack PDU
Schneider Electric is aware of a vulnerability in its Rack Power Distribution Unit (PDU) products. The Rack PDU products (AP7xxxx, AP8xxxx, and APDU9xxx series) are devices that provide real-time remote monitoring at the outlet level to provide: • advanced da…
first Dec 14, 2021 -
MediumSEVD-2021-348-01 2 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Collector module for the IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS …
-
CriticalSEVD-2021-348-02 7 CVEs
EVlink City / Parking / Smart Wallbox Charging Stations
Schneider Electric is aware of multiple vulnerabilities in its EVlink City, Parking, and Smart Wallbox products. The EVlink products are electric vehicle (EV) charging stations for private properties, semi-public car parks and on-street charging. These vulner…
-
HighSEVD-2021-313-01 1 CVE
SCADAPack 300E Series RTU
Schneider Electric is aware of a vulnerability in its SCADAPack 300E Series RTU products. The SCADAPack 300E Series RTUs are a range of compact Smart RTU which control and monitor remote assets. Failure to apply the remediation or mitigations provided below m…
-
HighSEVD-2021-313-07 3 CVEs
Eurotherm GUIcon
Schneider Electric is aware of multiple vulnerabilities in its GUIcon software. The GUIcon software was a configuration tool for the discontinued penGUIn HMI range. Failure to apply the mitigations provided below may risk code belonging to the attacker being …
-
LowSEVD-2021-313-02 1 CVE
Schneider Electric Software Update
Schneider Electric is aware of a vulnerability in its Schneider Electric Software Update product (also referred to as “SESU”), which is used to notify and download updates for other Schneider Electric Software products. To connect to the Internet, the SESU pr…
-
CriticalSEVD-2021-285-03 4 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in its Data Collector module for IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS comm…
-
HighSEVD-2021-285-01 1 CVE
spaceLYnk, Wiser For KNX, fellerLYnk
Schneider Electric is aware of a vulnerability in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility and simplifies building management. Wiser…
-
HighSEVD-2021-285-02 1 CVE
ConneXium Network Manager (CNM) Software
Schneider Electric is aware of a vulnerability in its ConneXium Network Manager (CNM) software. The ConneXium Network Manager (CNM) is a software which allows users to configure one or more Ethernet devices with a few button clicks, reducing the need to log i…
-
HighSEVD-2021-285-04 1 CVE
Modicon M218 Logic Controller
Schneider Electric is aware of a vulnerability in its Modicon M218 Logic Controller product. The Modicon M218 Logic Controller is a programmable controller providing an optimized solution to repetitive machines based on high speed counting and simple position…
-
Critical max 10.0
Conext™ Advisor & Conext™ Control V2
Schneider Electric is aware of multiple Microsoft Windows vulnerabilities in its Schneider Conext™ Advisor 2 & Conext™ Control V2 products. The Conext™ Advisor 2 is a web portal with an efficient, task-oriented interface for managing and optimizing the perfor…
-
Critical max 9.1SEVD-2021-257-03 2 CVEs
StruxureWare Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert product. StruxureWare Data Center Expert provides an efficient way for organizations to monitor and manage their company-wide multi-vendor physical infrastructure; …
-
HighSEVD-2021-222-05 1 CVE
AccuSine PCSn/PCS+/PFV+
Schneider Electric is aware of a vulnerability in its AccuSine PCSn, PCS+ and PFV+ products. AccuSine addresses power quality issues and stabilizes electrical networks by providing harmonic mitigation, power factor correction, and load balancing. Failure to a…
-
HighSEVD-2021-222-03 1 CVE
Pro-face GP-Pro EX
Schneider Electric is aware of a vulnerability in its Pro-face GP-Pro EX product. The Pro-face GP-Pro EX product is an HMI Screen Editor & Logic Programming Software. Failure to apply the remediations provided below may risk software hijacking, which could re…
-
HighSEVD-2021-222-06 3 CVEs
CODESYS V2 Vulnerabilities in Programmable Automation Controller (PacDrive) M
Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V2 runtime for industrial control systems, which is used in its Programmable Automation Controller (PacDrive) M products. The Programmable Automation Controller (PacDrive)…
-
High
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their associated communication modules. The Modicon Ethernet Programmable Automation are controllers for industrial pro…
first Dec 8, 2020 -
Critical max 10.0
Treck HTTP Server Vulnerability on TM3 Bus Coupler Modules (V2.0)
Schneider Electric is aware of a vulnerability affecting Treck Inc.’s HTTP Server component used in the Schneider Electric TM3BC bus coupler modules. Failure to apply the mitigations provided below may risk heap-based buffer overflow, which could result in De…
first Dec 18, 2020