schneider-electric security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect schneider-electric products.
Vulnios monitors schneider-electric CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent schneider-electric security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2020-28221 — schneider-electric — ecostruxure_operator_terminal_expert, hmi_sto_501
A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when
criticalCVE-2020-28221Critical Vulnerability: CVE-2020-7540 — schneider-electric — modicon_m340_bmxp341000_firmware, modicon_m340_bmxp341000
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (
criticalCVE-2020-7540Critical Vulnerability: CVE-2020-28215 — schneider-electric — easergy_t300_firmware, easergy_t300
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbit
criticalCVE-2020-28215Critical Vulnerability: CVE-2020-7561 — schneider-electric — easergy_t300_firmware, easergy_t300
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, de
criticalCVE-2020-7561Critical Vulnerability: CVE-2020-7548 — schneider-electric — acti9_smartlink_si_d_firmware, acti9_smartlink_si_d
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized
criticalCVE-2020-7548Critical Vulnerability: CVE-2020-7533 — schneider-electric — modicon_m340_bmxp3420302_firmware, modicon_m340_bmxp3420302
CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.
criticalCVE-2020-7533Critical Vulnerability: CVE-2020-28212 — schneider-electric — ecostruxure_control_expert
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized c
criticalCVE-2020-28212Critical Vulnerability: CVE-2020-7522 — schneider-electric — apc_easy_ups_online_software
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method o
criticalCVE-2020-7522Critical Vulnerability: CVE-2020-7521 — schneider-electric — apc_easy_ups_online_software
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method o
criticalCVE-2020-7521Critical Vulnerability: CVE-2020-7498 — schneider-electric — os_loader, unity_loader
A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software (all versions). The fixed credentials are used to simplify file transfer. Today the use of fixe
criticalCVE-2020-7498Critical Vulnerability: CVE-2020-7497 — schneider-electric — ecostruxure_operator_terminal_expert
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vi
criticalCVE-2020-7497Critical Vulnerability: CVE-2020-7508 — schneider-electric — easergy_t300_firmware, easergy_t300
A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to gain full access by brute f
criticalCVE-2020-7508Critical Vulnerability: CVE-2020-7500 — schneider-electric — mtn6501-0001_firmware, mtn6501-0001
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notifi
criticalCVE-2020-7500Critical Vulnerability: CVE-2020-7512 — schneider-electric — easergy_t300_firmware, easergy_t300
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to exploit the c
criticalCVE-2020-7512Critical Vulnerability: CVE-2020-7487 — schneider-electric — ecostruxure_machine_expert, somachine
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
criticalCVE-2020-7487Critical Vulnerability: CVE-2020-7489 — schneider-electric — ecostruxure_machine_expert, somachine_basic
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming s
criticalCVE-2020-7489Critical Vulnerability: CVE-2020-7485 — schneider-electric, microsoft — tristation_1131, windows_7
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in
criticalCVE-2020-7485Critical Vulnerability: CVE-2020-7475 — schneider-electric — ecostruxure_control_expert, unity_pro
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to
criticalCVE-2020-7475Critical Vulnerability: CVE-2020-7480 — schneider-electric — andover_continuum_9680_firmware, andover_continuum_9680
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewabl
criticalCVE-2020-7480Critical Vulnerability: CVE-2018-7820 — schneider-electric — ap9630_firmware, ap9630
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitor
criticalCVE-2018-7820Critical Vulnerability: CVE-2019-6837 — schneider-electric — meg6501-0001_firmware, meg6501-0001
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server P
criticalCVE-2019-6837Critical Vulnerability: CVE-2019-6840 — schneider-electric — meg6501-0001_firmware, meg6501-0001
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG626
criticalCVE-2019-6840Critical Vulnerability: CVE-2019-6823 — schneider-electric — proclima
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system i
criticalCVE-2019-6823Critical Vulnerability: CVE-2019-6824 — schneider-electric — proclima
A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all
criticalCVE-2019-6824Critical Vulnerability: CVE-2018-7842 — schneider-electric — modicon_m580_firmware, modicon_m580
A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by
criticalCVE-2018-7842Critical Vulnerability: CVE-2019-6808 — schneider-electric — modicon_premium_firmware, modicon_premium
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting
criticalCVE-2019-6808Critical Vulnerability: CVE-2018-7847 — schneider-electric — modicon_m580_firmware, modicon_m580
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service or potential code ex
criticalCVE-2018-7847Critical Vulnerability: CVE-2019-6814 — schneider-electric — net5501_firmware, net5501
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a re
criticalCVE-2019-6814Critical Vulnerability: CVE-2019-6816 — schneider-electric — modicon_quantum_firmware, modicon_quantum
In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol.
criticalCVE-2019-6816Critical Vulnerability: CVE-2019-6815 — schneider-electric — modicon_quantum_firmware, modicon_quantum
In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration wh
criticalCVE-2019-6815Critical Vulnerability: CVE-2018-7846 — schneider-electric — modicon_m580_firmware, modicon_m580
A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauth
criticalCVE-2018-7846Critical Vulnerability: CVE-2018-7800 — schneider-electric — evlink_parking_firmware, evlink_parking
A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacker to gain access to the device.
criticalCVE-2018-7800Critical Vulnerability: CVE-2018-7836 — schneider-electric — iiot_monitor
An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files.
criticalCVE-2018-7836Critical Vulnerability: CVE-2018-7809 — schneider-electric — modicom_m340_firmware, modicom_m340
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the
criticalCVE-2018-7809Critical Vulnerability: CVE-2018-7811 — schneider-electric — modicom_m340_firmware, modicom_m340
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the
criticalCVE-2018-7811Critical Vulnerability: CVE-2018-7790 — schneider-electric — modicon_m221_firmware, modicon_m221
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users
criticalCVE-2018-7790Critical Vulnerability: CVE-2018-7791 — schneider-electric — modicon_m221_firmware, modicon_m221
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unau
criticalCVE-2018-7791Critical Vulnerability: CVE-2018-7778 — schneider-electric — evlink_charging_station_firmware, evlink_charging_station
In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authent
criticalCVE-2018-7778Critical Vulnerability: CVE-2018-7780 — schneider-electric — imps110-1_firmware, imps110-1
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
criticalCVE-2018-7780Critical Vulnerability: CVE-2018-7785 — schneider-electric — u.motion_builder
In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.
criticalCVE-2018-7785Critical Vulnerability: CVE-2018-7784 — schneider-electric — u.motion
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of an input string is evaluated as a command by the application. In this way, the
criticalCVE-2018-7784Critical Vulnerability: CVE-2018-7245 — schneider-electric — 66074_mge_network_management_card_transverse, mge_comet_ups
An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the
criticalCVE-2018-7245Critical Vulnerability: CVE-2018-7760 — schneider-electric — bmxnor0200_firmware, bmxnor0200
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authoriza
criticalCVE-2018-7760Critical Vulnerability: CVE-2018-7246 — schneider-electric — 66074_mge_network_management_card_transverse, mge_comet_ups
A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (
criticalCVE-2018-7246Critical Vulnerability: CVE-2018-7242 — schneider-electric — bmxnor0200_firmware, bmxnor0200
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to
criticalCVE-2018-7242Critical Vulnerability: CVE-2018-7243 — schneider-electric — 66074_mge_network_management_card_transverse, mge_comet_ups
An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the a
criticalCVE-2018-7243Critical Vulnerability: CVE-2018-7241 — schneider-electric — bmxnor0200_firmware, bmxnor0200
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
criticalCVE-2018-7241Critical Vulnerability: CVE-2018-7761 — schneider-electric — bmxnor0200_firmware, bmxnor0200
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
criticalCVE-2018-7761Critical Vulnerability: CVE-2018-7238 — schneider-electric — mps110-1_firmware, mps110-1
A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attac
criticalCVE-2018-7238Critical Vulnerability: CVE-2018-7229 — schneider-electric — mps110-1_firmware, mps110-1
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gai
criticalCVE-2018-7229Critical Vulnerability: CVE-2018-7228 — schneider-electric — mps110-1_firmware, mps110-1
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get
criticalCVE-2018-7228Critical Vulnerability: CVE-2018-7231 — schneider-electric — mps110-1_firmware, mps110-1
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta ch
criticalCVE-2018-7231Critical Vulnerability: CVE-2018-7237 — schneider-electric — mps110-1_firmware, mps110-1
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of val
criticalCVE-2018-7237Critical Vulnerability: CVE-2018-7233 — schneider-electric — mps110-1_firmware, mps110-1
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta ch
criticalCVE-2018-7233Critical Vulnerability: CVE-2018-7232 — schneider-electric — mps110-1_firmware, mps110-1
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta ch
criticalCVE-2018-7232Critical Vulnerability: CVE-2017-14024 — schneider-electric — wonderware_indusoft_web_studio, wonderware_intouch
A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The s
criticalCVE-2017-14024Critical Vulnerability: CVE-2017-13997 — schneider-electric — wonderware_indusoft_web_studio, wonderware_intouch
A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio prov
criticalCVE-2017-13997Critical Vulnerability: CVE-2017-9957 — schneider-electric — u.motion_builder
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can u
criticalCVE-2017-9957Critical Vulnerability: CVE-2017-7974 — schneider-electric — u.motion_builder
A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and
criticalCVE-2017-7974Critical Vulnerability: CVE-2017-7973 — schneider-electric — u.motion_builder
A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of
criticalCVE-2017-7973
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track schneider-electric exposure across your environment
Vulnios automatically cross-references your asset inventory against new schneider-electric CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan