Vendor
Schneider Electric
434 known vulnerabilities.
Products
U.Motion 20
IGSS Data Server (IGSSdataServer.exe) 18
StruxureWare Data Center Expert 15
PowerChute™ Serial Shutdown 12
Pelco Sarix Professional 12
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
Modicon Controllers M241 / M251 10
EcoStruxure™ Process Expert 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure™ Power Monitoring Expert (PME) 9
Custom Reports (RMS16.dll) 8
EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module 8
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 8
EcoStruxure™ IT Data Center Expert 7
EcoStruxure Operator Terminal Expert 7
Pro-face BLUE 7
ClearSCADA 7
OPC UA Modicon Communication Module 7
X80 advanced RTU Communication Module 7
Modicon Momentum Unity M1E Processor (171CBU*) 7
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) 7
Sage 1410 6
Sage 1430 6
Sage 1450 6
Sage 2400 6
Sage 3030 Magnum 6
Modicon Controllers M258 / LMC058 6
Sage 4400 6
Data Center Expert 6
Wiser Smart 6
Modicon M580 CPU (part numbers BMEP* and BMEH*) 6
Modicon M580 5
Wonderware Information Server Portal 5
Modicon M340 5
Modicon MC80 (BMKC80) 5
SCADA Expert ClearSCADA 4
ASCO 5310 Single-Channel Remote Annunciator 4
ASCO 5350 Eight Channel Remote Annunciator 4
U.motion Builder 4
113 results · Clear filters · Feed
-
Medium 4.6
CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could tri…
-
Medium 5.9CVE-2026-81861 Public exploit
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information…
-
Medium 6.9
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to…
-
Medium 5.1
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the N…
-
Medium 6.9
CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-serv…
-
Medium 6.7
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of…
-
Medium 6.8
Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the sou…
-
Medium 5.3
CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application u…
-
Medium 5.3
CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log tr…
-
Medium 5.3
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file crea…
-
Medium 6.9
CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to …
-
Medium 6.9
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when…
-
Medium 6.9
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could c…
-
Medium 6.9
CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device inf…
-
Medium 5.1
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that c…
-
Medium 6.9
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machin…
-
Medium 6.9
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on…
-
Medium 5.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.3
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that …
-
Medium 4.1
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authentica…
-
Medium 4.9
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
Medium 6.7
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code ex…
-
Medium 5.3
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong c…
-
Medium 6.3
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code executi…
-
Medium 5.9
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of …
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impac…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicio…
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impac…
-
Medium 6.5
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticate…
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Ce…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicio…
-
Medium 5.5
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …
-
Medium 4.9
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
Medium 4.6
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these …
-
Medium 6.8
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to una…
-
Medium 4.6
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confide…
-
Medium 4.2
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized acc…
-
Medium 6.8
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized us…