Source
Schneider Electric CPCERT
Source: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
294 results · Feed
-
High
Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (V2.0)
Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their associated communication modules. The Modicon Ethernet Programmable Automation are controllers for industrial pro…
first Dec 8, 2020 -
MediumSEVD-2021-194-03 1 CVE
SoSafe Configurable
Schneider Electric is aware of a vulnerability in its SoSafe Configurable product. The SoSafe Configurable product is used to configure Preventa safety controllers. Failure to apply the remediations provided below may risk code execution on the engineering wo…
-
MediumSEVD-2021-194-04 1 CVE
C-Bus Toolkit
Schneider Electric is aware of a vulnerability in its C-Bus Toolkit product. The C-Bus Toolkit product is an application you run on your personal computer to configure and commission C-Bus Installations. Failure to apply the remediations provided below may ri…
-
CriticalSEVD-2021-194-05 1 CVE
Easergy T200
Schneider Electric is aware of a vulnerability in its Easergy T200 RTU (Remote Terminal Unit). The Easergy T200 RTU is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the mitigations provided belo…
-
High
EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and RemoteConnect™
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert product and EcoStruxure™ Process Expert. The EcoStruxure™ Control Expert product is a software to design, diagnose, maintain and update applications for Modicon M340, M580 and M…
first Dec 8, 2020 -
Unscored max 9.8
APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices
Schneider Electric became aware of multiple vulnerabilities affecting Treck Inc.'s embedded TCP/IP stack, collectively known as Ripple20, which Treck publicly disclosed on June 16, 2020. Schneider Electric is also aware of a proof of concept published by JSOF…
first Jun 22, 2020 -
Critical max 9.8SEVD-2021-159-03 6 CVEs
PowerLogic EGX100 and PowerLogicEGX300
Schneider Electric is aware of multiple vulnerabilities in its PowerLogic EGX100 and EGX300 products. The PowerLogic EGX100 and EGX300 are communication gateway devices. Failure to apply the mitigations provided below may risk denial of service or remote code…
-
HighSEVD-2021-159-01 13 CVEs
IGSS (Interactive Graphical SCADA System)
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
High
Easergy Builder
Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy Builder configuration tool. Schneider Electric has worked closely with Ilya Karpov and Evgeniy Druzhinin of Rostelecom-Solar to re…
first Jun 9, 2020 -
Critical
Easergy T300
Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy T300 product. Schneider Electric has worked closely with the researchers to remediate the vulnerabilities. We appreciate their col…
first Jun 9, 2020 -
HighSEVD-2021-130-05 1 CVE
Modicon M241 & M251 Logic Controllers
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
CriticalSEVD-2021-130-01 1 CVE
Modicon Managed Switch
Schneider Electric is aware of a vulnerability in its Modicon Managed Switch products. The Modicon Managed Switch products are designed for the special requirements of industrial automation. The devices allow users to set up switched Industrial Ethernet netwo…
-
MediumSEVD-2021-130-07 1 CVE
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure Geo SCADA Expert products (formerly known as ClearSCADA). The EcoStruxure Geo SCADA Expert product is an open, flexible and scalable software system for telemetry and remote SCADA solutions. Fa…
-
High
Modicon Controllers, EcoStruxure™ Control Expert and Unity Pro Programming Software
Researchers from Airbus Cybersecurity have made Schneider Electric aware of a vulnerability in two versions of Schneider Electric's Modicon programmable controllers and its EcoStruxure Control Expert (formerly Unity Pro) programming software. Since alerting u…
first Mar 20, 2020 -
High
Interactive Graphical SCADA System (IGSS)
Schneider Electric is aware of multiple vulnerabilities in the Interactive Graphical SCADA System (IGSS) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major in…
first Nov 10, 2020 -
Medium
U.motion Servers and Touch Panels
Schneider Electric is aware of multiple vulnerabilities in the U.motion servers and touch panel products.
first May 12, 2020 -
CriticalSEVD-2021-068-02 1 CVE
PowerLogic ION7400 / PM8000 / ION9000 Power Meters
Customers should use appropriate methodologies when applying these upgrades to their devices. We strongly recommend evaluating the impact of these updates in a test and development environment prior to deployment. Contact Schneider Electric's Customer Care Ce…
-
HighSEVD-2021-068-01 4 CVEs
IGSS (Interactive Graphical SCADA System)
Schneider Electric is aware of multiple vulnerabilities in the Interactive Graphical SCADA System (IGSS) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major in…
-
High max 7.3
SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator
Schneider Electric is aware of multiple vulnerabilities in the SCADAPack x70 Remote Connect and the SCADAPack x70 Security Administrator applications.
first Sep 8, 2020 -
High max 6.1SEVD-2021-040-01 3 CVEs
PowerLogic Power Metering Products
Customers should use appropriate methodologies when applying these upgrades to their devices. We strongly recommend evaluating the impact of these updates in a test and development environment prior to deployment. Contact Schneider Electric's Customer Care Ce…
-
High max 9.8
Modicon M100/M200/M221 Programmable Logic Controller
Schneider Electric is aware of multiple vulnerabilities in its Modicon M100, M200, and M221 products. The Modicon M100/M200/M221 are Nano Programmable Logic Controllers (PLC) made to control basic automation for machines. The M100/M200/M221 are configured usi…
first Nov 10, 2020 -
High
EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
first Nov 9, 2020 -
Medium max 7.5
Web Server on Modicon M340, Legacy Offers Modicon Quantum Modicon Premium and associated Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340, Modicon Quantum and Modicon Premium legacy offers and associated communication modules. The Modicon Ethernet Programmable Automation controller products are controllers for industrial process…
-
Critical
Wibu-Systems CodeMeter Vulnerabilities
Schneider Electric is aware of multiple vulnerabilities disclosed by Wibu-Systems in the CodeMeter licensing manager product which is used by some Schneider Electric and Eurotherm offers. Failure to apply the remediations provided below may risk various types…
first Oct 13, 2020 -
HighSEVD-2020-343-08 3 CVEs
Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium
Customers should use appropriate methodologies when upgrading their systems. We strongly recommend the use of back-ups and evaluating the impact of these upgrades in a Test and Development environment or on an offline infrastructure. Contact Schneider Electri…
-
Critical
Easergy T300
Schneider Electric is aware of a vulnerability in its Easergy T300 RTU (Remote Terminal Unit). The Easergy T300 is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the remediation provided below ma…
first Nov 10, 2020 -
Medium max 4.7SEVD-2020-343-09 1 CVE
Modicon M258 Logic Controllers and SoMachine/ SoMachine Motion Software
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
MediumSEVD-2020-343-02 1 CVE
EcoStruxure Geo SCADA Expert
Schneider Electric is aware of a vulnerability in the Schneider Electric EcoStruxure Geo SCADA Expert product. EcoStruxure Geo SCADA Expert software is an integrated, scalable and reliable Supervisory Control and Data Acquisition (SCADA) software with ready-t…
-
Medium max 7.5
Modicon M218/M241/M251/M258 Logic Controllers,SoMachine/SoMachine Motion, EcoStruxure™ Machine Expert
Schneider Electric is aware of multiple vulnerabilities in the Modicon M218, M241, M251 and M258 Logic Controllers, SoMachine & SoMachine Motion, and EcoStruxure Machine Expert products. The Ecostruxure Machine Expert products are programmable logic controlle…
first Apr 14, 2020 -
Medium max 7.0SEVD-2020-315-04 7 CVEs
EcoStruxure Building Operation (EBO)
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. C…
-
HighSEVD-2020-287-04 3 CVEs
EcoStruxure™ and SmartStruxure™ Power Monitoring and SCADA Software
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ and SmartStruxure™ Power Monitoring & SCADA Software. Failure to apply the mitigation provided below may risk remote code execution, which could result in an attacker gaining root lev…
-
HighSEVD-2020-287-03 1 CVE
Smartlink, PowerTag, and Wiser Series Gateways
Schneider Electric is aware of a vulnerability in its Smartlink, PowerTag, and Wiser series gateways. Failure to apply the mitigation provided below may risk unauthorized access to the product.
-
High
Schneider Electric Modbus Serial Driver
Schneider Electric is aware of a vulnerability in the Modbus Serial Driver Component.
first Aug 11, 2020 -
High
Vijeo Designer and Vijeo Designer Basic Software
Schneider Electric is aware of a vulnerability in the Vijeo Designer Basic and Vijeo Designer software products.
first May 12, 2020 -
High
Schneider Electric PACTware
Schneider Electric is aware of multiple vulnerabilities in the PACTware product.
first Aug 11, 2020 -
HighSEVD-2020-224-02 1 CVE
spaceLYnk & Wiser for KNX (formerly homeLYnk)
Schneider Electric is aware of a vulnerability in the spaceLYnk and Wiser for KNX (formerly known as homeLYnk) products.
-
HighSEVD-2020-224-05 1 CVE
PowerChute Business Edition
Schneider Electric is aware of a vulnerability in the PowerChute Business Edition software which may lead to remote code execution.
-
MediumSEVD-2020-224-03 1 CVE
Modicon M218 Logic Controller
Schneider Electric is aware of a vulnerability in the Modicon M218 Logic Controller product.
-
MediumSEVD-2020-224-07 1 CVE
SoMove
Schneider Electric is aware of a vulnerability in the SoMove application.
-
CriticalSEVD-2020-224-04 2 CVEs
APC Easy UPS On-Line Software
Schneider Electric is aware of multiple vulnerabilities in the APC Easy UPS On-Line Software, which may lead to the uploading of executable files to non-specified directories by an unauthorized user.