Vendor
Schneider Electric
434 known vulnerabilities.
Products
U.Motion 20
IGSS Data Server (IGSSdataServer.exe) 18
StruxureWare Data Center Expert 15
PowerChute™ Serial Shutdown 12
Pelco Sarix Professional 12
EcoStruxure Control Expert 12
Modicon M340 CPU (part numbers BMXP34*) 12
Modicon Controllers M241 / M251 10
EcoStruxure™ Process Expert 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure™ Power Monitoring Expert (PME) 9
Custom Reports (RMS16.dll) 8
EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module 8
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 8
EcoStruxure™ IT Data Center Expert 7
EcoStruxure Operator Terminal Expert 7
Pro-face BLUE 7
ClearSCADA 7
OPC UA Modicon Communication Module 7
X80 advanced RTU Communication Module 7
Modicon Momentum Unity M1E Processor (171CBU*) 7
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) 7
Sage 1410 6
Sage 1430 6
Sage 1450 6
Sage 2400 6
Sage 3030 Magnum 6
Modicon Controllers M258 / LMC058 6
Sage 4400 6
Data Center Expert 6
Wiser Smart 6
Modicon M580 CPU (part numbers BMEP* and BMEH*) 6
Modicon M580 5
Wonderware Information Server Portal 5
Modicon M340 5
Modicon MC80 (BMKC80) 5
SCADA Expert ClearSCADA 4
ASCO 5310 Single-Channel Remote Annunciator 4
ASCO 5350 Eight Channel Remote Annunciator 4
U.motion Builder 4
434 results · Feed
-
High 7.0
CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse s…
-
High 8.4
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious pr…
-
High 8.4
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious…
-
High 7.3
CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target ins…
-
Medium 6.9
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on…
-
High 7.3
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
Medium 5.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.3
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that …
-
Low 1.0
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized …
-
Medium 4.1
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authentica…
-
Medium 4.9
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.2
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.5
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data…
-
High 7.5
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data…
-
High 8.7
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise o…
-
Medium 6.7
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code ex…
-
High 7.3
CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary …
-
High 7.5
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP c…
-
Medium 5.3
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong c…
-
High 7.2
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is …
-
Medium 6.3
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code executi…
-
High 7.2
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote comman…
-
High 8.9
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generat…
-
Critical 9.5CVE-2025-50121 EPSS 22%
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…
-
Medium 5.9
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of …
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impac…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicio…
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impac…
-
Medium 6.5
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticate…
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Ce…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicio…
-
Medium 5.5
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …
-
Medium 4.9
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.2
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could …
-
High 7.5
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss o…
-
Medium 4.6
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these …
-
Medium 6.8
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to una…
-
Medium 4.6
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confide…