Vendor
Schneider Electric
434 known vulnerabilities.
Products
U.Motion 20
IGSS Data Server (IGSSdataServer.exe) 18
StruxureWare Data Center Expert 15
PowerChute™ Serial Shutdown 12
Pelco Sarix Professional 12
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
Modicon Controllers M241 / M251 10
EcoStruxure™ Process Expert 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure™ Power Monitoring Expert (PME) 9
Custom Reports (RMS16.dll) 8
EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module 8
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 8
EcoStruxure™ IT Data Center Expert 7
EcoStruxure Operator Terminal Expert 7
Pro-face BLUE 7
ClearSCADA 7
OPC UA Modicon Communication Module 7
X80 advanced RTU Communication Module 7
Modicon Momentum Unity M1E Processor (171CBU*) 7
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) 7
Sage 1410 6
Sage 1430 6
Sage 1450 6
Sage 2400 6
Sage 3030 Magnum 6
Modicon Controllers M258 / LMC058 6
Sage 4400 6
Data Center Expert 6
Wiser Smart 6
Modicon M580 CPU (part numbers BMEP* and BMEH*) 6
Modicon M580 5
Wonderware Information Server Portal 5
Modicon M340 5
Modicon MC80 (BMKC80) 5
SCADA Expert ClearSCADA 4
ASCO 5310 Single-Channel Remote Annunciator 4
ASCO 5350 Eight Channel Remote Annunciator 4
U.motion Builder 4
159 results · Clear filters · Feed
-
High 8.6
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be u…
-
High 8.7
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
High 8.6
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and di…
-
High 8.6
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that co…
-
High 7.3
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
High 8.2
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service o…
-
High 8.4
CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execu…
-
High 8.7
CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthoriz…
-
High 8.6
CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that coul…
-
High 8.7
CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the dev…
-
High 8.7
CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensiti…
-
High 7.1
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclos…
-
High 8.2
Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using…
-
High 7.1
Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.
-
High 8.7
Insufficient Entropy vulnerability on Multiple Products
CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.
-
High 7.2
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of unt…
-
High 7.0
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity a…
-
High 8.5
CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administ…
-
High 7.5
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code exe…
-
High 7.0
CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintend…
-
High 7.0
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized discl…
-
High 7.0
CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse s…
-
High 8.4
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious pr…
-
High 8.4
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious…
-
High 7.3
CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target ins…
-
High 7.3
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.2
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.5
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data…
-
High 7.5
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data…
-
High 8.7
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise o…
-
High 7.3
CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary …
-
High 7.5
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP c…
-
High 7.2
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is …
-
High 7.2
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote comman…
-
High 8.9
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generat…
-
High 7.2
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.5
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss o…
-
High 7.8
CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availa…
-
High 7.8
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak informatio…
-
High 7.8
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data an…