Vendor
Schneider Electric
434 known vulnerabilities.
Products
U.Motion 20
IGSS Data Server (IGSSdataServer.exe) 18
StruxureWare Data Center Expert 15
PowerChute™ Serial Shutdown 12
Pelco Sarix Professional 12
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
Modicon Controllers M241 / M251 10
EcoStruxure™ Process Expert 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure™ Power Monitoring Expert (PME) 9
Custom Reports (RMS16.dll) 8
EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module 8
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 8
EcoStruxure™ IT Data Center Expert 7
EcoStruxure Operator Terminal Expert 7
Pro-face BLUE 7
ClearSCADA 7
OPC UA Modicon Communication Module 7
X80 advanced RTU Communication Module 7
Modicon Momentum Unity M1E Processor (171CBU*) 7
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) 7
Sage 1410 6
Sage 1430 6
Sage 1450 6
Sage 2400 6
Sage 3030 Magnum 6
Modicon Controllers M258 / LMC058 6
Sage 4400 6
Data Center Expert 6
Wiser Smart 6
Modicon M580 CPU (part numbers BMEP* and BMEH*) 6
Modicon M580 5
Wonderware Information Server Portal 5
Modicon M340 5
Modicon MC80 (BMKC80) 5
SCADA Expert ClearSCADA 4
ASCO 5310 Single-Channel Remote Annunciator 4
ASCO 5350 Eight Channel Remote Annunciator 4
U.motion Builder 4
6 results · Clear filters · Feed
-
Low 2.4
CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information…
-
Low 1.0
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized …
-
Low 3.3
CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a …
-
Low 3.9
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the …
-
Low 2.1
Schneider Electric Wonderware Inadequate Encryption Strength
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.
-
Low 2.1
Schneider Electric Wonderware Input Validation
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML Ex…