Vendor

Schneider Electric

434 known vulnerabilities.

Products

U.Motion 20 IGSS Data Server (IGSSdataServer.exe) 18 StruxureWare Data Center Expert 15 PowerChute™ Serial Shutdown 12 Pelco Sarix Professional 12 EcoStruxure Control Expert 12 Modicon M340 CPU (part numbers BMXP34*) 12 Modicon Controllers M241 / M251 10 EcoStruxure™ Process Expert 10 IGSS Dashboard (DashBoard.exe) 9 EcoStruxure™ Power Monitoring Expert (PME) 9 Custom Reports (RMS16.dll) 8 EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module 8 Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 8 EcoStruxure™ IT Data Center Expert 7 EcoStruxure Operator Terminal Expert 7 Pro-face BLUE 7 ClearSCADA 7 OPC UA Modicon Communication Module 7 X80 advanced RTU Communication Module 7 Modicon Momentum Unity M1E Processor (171CBU*) 7 Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) 7 Sage 1410 6 Sage 1430 6 Sage 1450 6 Sage 2400 6 Sage 3030 Magnum 6 Modicon Controllers M258 / LMC058 6 Sage 4400 6 Data Center Expert 6 Wiser Smart 6 Modicon M580 CPU (part numbers BMEP* and BMEH*) 6 Modicon M580 5 Wonderware Information Server Portal 5 Modicon M340 5 Modicon MC80 (BMKC80) 5 SCADA Expert ClearSCADA 4 ASCO 5310 Single-Channel Remote Annunciator 4 ASCO 5350 Eight Channel Remote Annunciator 4 U.motion Builder 4

All Critical High Medium Low Exploited only Public exploit

113 results · Clear filters · Feed

Medium 6.0

CVE-2025-2002

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP …

Schneider Electric EcoStruxure™ Panel Server ICS / OT

Mar 12, 2025
Medium 5.3

CVE-2025-0814

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services runni…

Schneider Electric Enerlin’X eIFE (LV851001) Enerlin’X IFE interface (LV434001) ICS / OT

Feb 13, 2025
Medium 6.5

CVE-2025-0815

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…

Schneider Electric Enerlin’X eIFE (LV851001) Enerlin’X IFE interface (LV434001) ICS / OT

Feb 13, 2025
Medium 6.5

CVE-2025-0816

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…

Schneider Electric Enerlin’X IFE interface (LV434001) Enerlin’X eIFE (LV851001) ICS / OT

Feb 13, 2025
Medium 5.5

CVE-2024-10083

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation wh…

Schneider Electric Uni-Telway driver used in EcoStruxure Process Expert Uni-Telway driver used in OPC Factory Server Uni-Telway driver used in EcoStruxure Control Expert ICS / OT

Feb 13, 2025
Medium 5.4

CVE-2024-8401

CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …

Schneider Electric EcoStruxure Power Operation (EPO) 2021 – Advanced Reporting and Dashboards Module EcoStruxure Power Monitoring Expert (PME) 2021 EcoStruxure Power Operation (EPO) 2022 ICS / OT

Jan 28, 2025
Medium 6.5

CVE-2024-10498

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow …

Schneider Electric PowerLogic HDPM6000 ICS / OT

Jan 17, 2025
Medium 4.6

CVE-2024-11139

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow …

Schneider Electric EcoStruxure Power Build Rapsody ICS / OT

Jan 17, 2025
Medium 5.3

CVE-2024-10511 Public exploit

CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someo…

Schneider Electric PowerChute™ Serial Shutdown ICS / OT

Dec 11, 2024
Medium 6.5

CVE-2024-8936

CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory …

Schneider Electric Modicon M340 CPU (part numbers BMXP34*) ICS / OT

Nov 13, 2024
Medium 6.5

CVE-2024-8937

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause …

Schneider Electric Modicon M340 CPU (part numbers BMXP34*) Modicon Momentum Unity M1E Processor (171CBU*) Modicon MC80 (part numbers BMKC80) ICS / OT

Nov 13, 2024
Medium 5.9

CVE-2024-8530

CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data wh…

Schneider Electric Data Center Expert ICS / OT

Oct 11, 2024
Medium 5.4

CVE-2024-6528

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that …

Schneider Electric Modicon Controllers M241 / M251 Modicon Controllers M258 / LMC058 Modicon Controllers M262 ICS / OT

Jul 11, 2024
Medium 6.1

CVE-2024-5559

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, devi…

Schneider Electric PowerLogic P5 ICS / OT

Jun 12, 2024
Medium 5.4

CVE-2024-37040

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a…

Schneider Electric Sage 1430 Sage 2400 Sage 4400 ICS / OT

Jun 12, 2024
Medium 5.9

CVE-2024-37039

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker …

Schneider Electric Sage 4400 Sage 1410 Sage 1450 ICS / OT

Jun 12, 2024
Medium 5.3

CVE-2024-5560

CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when …

Schneider Electric Sage 2400 Sage 4400 Sage 1410 ICS / OT

Jun 12, 2024
Medium 4.5

CVE-2024-5557

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP creden…

Schneider Electric SpaceLogic AS-B SpaceLogic AS-P ICS / OT

Jun 12, 2024
Medium 6.4

CVE-2024-5558

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileg…

Schneider Electric SpaceLogic AS-B SpaceLogic AS-P ICS / OT

Jun 12, 2024
Medium 6.5

CVE-2024-5313

CWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH interface over the product netwo…

Schneider Electric EVlink Home Smart ICS / OT

Jun 12, 2024
Medium 6.5

CVE-2024-5056

CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the …

Schneider Electric Modicon M340 Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110 Network module, Modicon M340, Modbus/TCP BMXNOE0100 ICS / OT

Jun 12, 2024
Medium 5.3

CVE-2023-6407

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

Schneider Electric Easy UPS Online Monitoring Software ICS / OT

Dec 14, 2023
Medium 6.5

CVE-2023-5630

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install …

Schneider Electric Trio Q-Series Ethernet Data Radio Trio J-Series Ethernet Data Radio Trio E-Series Ethernet Data Radio ICS / OT

Dec 14, 2023
Medium 5.3

CVE-2023-6032

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

Schneider Electric Galaxy VS Galaxy VL ICS / OT

Nov 15, 2023
Medium 6.1

CVE-2023-5987

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could ca…

Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module ICS / OT

Nov 15, 2023
Medium 4.8

CVE-2023-5985

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise o…

Schneider Electric ION8650 ION8800 ICS / OT

Nov 15, 2023
Medium 5.3

CVE-2023-3953

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…

Schneider Electric GP-Pro EX WinGP for iPC GP-Pro EX WinGP for PC/AT ICS / OT

Aug 9, 2023
Medium 5.5

CVE-2023-37200

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confiden…

Schneider Electric EcoStruxure™ OPC UA Server Expert ICS / OT

Jul 12, 2023
Medium 6.8

CVE-2023-37199

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code e…

Schneider Electric StruxureWare Data Center Expert ICS / OT

Jul 12, 2023
Medium 6.8

CVE-2023-37198

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code e…

Schneider Electric StruxureWare Data Center Expert ICS / OT

Jul 12, 2023
Medium 5.0

CVE-2023-2161

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized rea…

Schneider Electric OPC Factory Server (OFS) ICS / OT

May 16, 2023
Medium 6.5

CVE-2023-25620

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service…

Schneider Electric Modicon M340 CPU (part numbers BMXP34*) Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Modicon Momentum Unity M1E Processor (171CBU*) ICS / OT

Apr 19, 2023
Medium 6.7

CVE-2023-28003

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized a…

Schneider Electric EcoStruxure™ Power Monitoring Expert ICS / OT

Apr 18, 2023
Medium 5.6

CVE-2023-25555

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…

Schneider Electric StruxureWare Data Center Expert ICS / OT

Apr 18, 2023
Medium 6.1

CVE-2023-25553

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on …

Schneider Electric StruxureWare Data Center Expert ICS / OT

Apr 18, 2023
Medium 6.1

CVE-2023-25551

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on …

Schneider Electric StruxureWare Data Center Expert ICS / OT

Apr 18, 2023
Medium 6.5

CVE-2022-43378

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be t…

Schneider Electric NetBotz 4 - 355/450/455/550/570 ICS / OT

Apr 18, 2023
Medium 6.3

CVE-2022-34755

A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged …

Schneider Electric Easergy Builder Installer ICS / OT

Apr 18, 2023
Medium 5.5

CVE-2023-1548

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of serv…

Schneider Electric EcoStruxure Control Expert ICS / OT

Apr 18, 2023
Medium 6.5

CVE-2023-27979

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the …

Schneider Electric IGSS Data Server (IGSSdataServer.exe) IGSS Dashboard (DashBoard.exe) Custom Reports (RMS16.dll) ICS / OT

Mar 21, 2023

Schneider Electric

Products

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP …

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services runni…

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation wh…

CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow …

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow …

CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someo…

CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory …

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause …

CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data wh…

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that …

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, devi…

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a…

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker …

CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when …

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP creden…

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileg…

CWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH interface over the product netwo…

CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the …

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install …

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could ca…

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise o…

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confiden…

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code e…

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code e…

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized rea…

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service…

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized a…

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on …

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on …

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be t…

A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged …

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of serv…

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the …