Login Request a demo
SC
Vendor
Schneider-electric
1,021 products with CVEs on record
3,941
CVEs
1
On KEV
6
New 30D
Products
SR
Sage RTU 1410
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 1430
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 1450
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 2400
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 3030 Magnum
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 4400
Schneider Electric
8.6
1 CVEs0 on KEV1 new
UB
U.motion Builder
Schneider Electric
9.8
24 CVEs1 on KEV0 new
SD
Struxureware Data Center Expert
Schneider-electric
9.8
47 CVEs0 on KEV0 new
IG
Interactive Graphical Scada System
Schneider-electric
9.8
43 CVEs0 on KEV0 new
MM
Modicon M580 Firmware
Schneider-electric
9.8
41 CVEs0 on KEV0 new
MM
Modicon M340 Firmware
Schneider-electric
9.8
39 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342020 Firmware
Schneider-electric
9.8
32 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420302 Firmware
Schneider-electric
9.8
28 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp341000 Firmware
Schneider-electric
9.8
27 CVEs0 on KEV0 new
EC
Ecostruxure Control Expert
Schneider-electric
9.8
26 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342000 Firmware
Schneider-electric
9.8
25 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420102 Firmware
Schneider-electric
9.8
25 CVEs0 on KEV0 new
MQ
Modicon Quantum Firmware
Schneider-electric
9.8
25 CVEs0 on KEV0 new
ET
Easergy T300 Firmware
Schneider-electric
9.8
24 CVEs0 on KEV0 new
MP
Modicon Premium Firmware
Schneider-electric
9.8
23 CVEs0 on KEV0 new
1F
140cpu65150 Firmware
Schneider-electric
9.8
20 CVEs0 on KEV0 new
EC
Evlink City Evc1s22p4 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EC
Evlink City Evc1s7p4 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EP
Evlink Parking Evf2 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EP
Evlink Parking Evw2 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
ES
Evlink Smart Wallbox Evb1a Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420102cl Firmware
Schneider-electric
9.8
17 CVEs0 on KEV0 new
SF
Spacelynk Firmware
Schneider-electric
9.8
17 CVEs0 on KEV0 new
MM
Modicon M221 Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342020h Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420302cl Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420302h Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
EP
EcoStruxure™ Process Expert
Schneider Electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp1110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp219-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp319-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp519-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibps110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp1110-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp1110-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp1110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp219-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp219-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp219-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp319-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp319-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp319-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp519-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp519-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp519-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imps110-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imps110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
BF
Bmxnoe0100 Firmware
Schneider-electric
9.8
14 CVEs0 on KEV0 new
BF
Bmxnoe0110 Firmware
Schneider-electric
9.8
14 CVEs0 on KEV0 new
BF
Bmxnor0200h Firmware
Schneider-electric
9.8
14 CVEs0 on KEV0 new
EP
Ecostruxure Power Monitoring Expert
Schneider-electric
9.8
14 CVEs0 on KEV0 new
1F
140cpu65160 Firmware
Schneider-electric
9.8
13 CVEs0 on KEV0 new
EP
Evlink Parking Ev.2 Firmware
Schneider-electric
9.8
13 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342030 Firmware
Schneider-electric
9.8
13 CVEs0 on KEV0 new
1F
140cpu65260 Firmware
Schneider-electric
9.8
12 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-102250
SR
Sage RTU 1410
Schneider Electric
8.6
0%
Oct 13CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware…
CVE-2026-3869
MM
Modicon M580 Safety
Schneider Electric
9.2
1%
Sep 11CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an…
CVE-2026-81861
S4
SCADAPack 47xi
Schneider Electric
5.9
1%
Sep 11CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality
CVE-2026-77120
PT
PowerLogic T300
Schneider Electric
8.7
1%
Sep 9CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and…
CVE-2026-19233
EI
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Schneider Electric
8.6
1%
Sep 9CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged…
CVE-2026-8044
EI
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Schneider Electric
8.6
1%
Sep 9CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a…
CVE-2026-13348
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.9
1%
Sep 1CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an…
CVE-2026-13337
N5
NetBotz 5 - 750/755
Schneider Electric
5.1
0%
Sep 1CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the…
CVE-2026-13336
N5
NetBotz 5 - 750/755
Schneider Electric
7.3
2%
Sep 1CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system…
CVE-2024-10085
EO
EcoStruxure™ OPC UA Server Expert
Schneider Electric
8.2
0%
Sep 1CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of…
CVE-2026-12927
ID
IGSS Definition (Def.exe)
Schneider Electric
8.4
0%
Jul 29CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS…
CVE-2026-0667
S5
SCADAPack 57x
Schneider Electric
9.3
1%
Jul 29CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity…
CVE-2026-14354
EC
EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric
8.7
0%
Jul 29CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to…
CVE-2026-9718
PP
PowerLogic™ P7
Schneider Electric
6.5
0%
Jun 25CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a…
CVE-2026-9717
PP
PowerLogic™ P7
Schneider Electric
7.2
2%
Jun 25CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated…
CVE-2026-9716
PP
PowerLogic™ P7
Schneider Electric
7.5
0%
Jun 25CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when…
CVE-2026-9651
SD
Saitel DP Remote Terminal Unit & Controller
Schneider Electric
4.4
0%
Jun 25CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an…
CVE-2026-9650
ET
EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Schneider Electric
7.5
0%
Jun 25CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses…
CVE-2026-8045
EI
EcoStruxure™ IT Data Center Expert
Schneider Electric
6.5
0%
Jun 9CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a…
CVE-2026-6332
EM
Ecostruxure™ Machine Expert HVAC
Schneider Electric
7.5
0%
May 14Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
CVE-2026-6866
EP
EcoStruxure™ Panel Server
Schneider Electric
7.5
0%
May 12Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server
CVE-2026-6865
ET
EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Schneider Electric
7.1
0%
May 12Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products
CVE-2026-4827
EM
Easergy MiCOM C264
Schneider Electric
8.7
0%
May 12Insufficient Entropy vulnerability on Multiple Products
CVE-2026-2401
PS
PowerChute™ Serial Shutdown
Schneider Electric
5.0
0%
Apr 14CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious…
CVE-2026-2400
PS
PowerChute™ Serial Shutdown
Schneider Electric
4.3
0%
Apr 14CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the…
CVE-2026-2403
PS
PowerChute™ Serial Shutdown
Schneider Electric
4.3
0%
Apr 14CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user…
CVE-2026-2405
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.5
0%
Apr 14CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the…
CVE-2026-2402
PS
PowerChute™ Serial Shutdown
Schneider Electric
5.3
0%
Apr 14CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary…
CVE-2026-2404
PS
PowerChute™ Serial Shutdown
Schneider Electric
5.3
0%
Apr 14CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request…
CVE-2026-2399
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.1
0%
Apr 14CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web…
CVE-2026-4832
EM
Easergy MiCOM P443, P445, P446, P543, P544, P545, P546
Schneider Electric
6.9
0%
Apr 14CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to…
CVE-2026-2273
EA
EcoStruxure™ Automation Expert
Schneider Electric
8.2
0%
Mar 10CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could…
CVE-2026-1286
EF
EcoStruxure™ Foxboro DCS
Schneider Electric
6.5
0%
Mar 10CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an…
CVE-2025-13902
MC
Modicon Controllers M241/M251
Schneider Electric
5.4
0%
Mar 10CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have…
CVE-2025-13901
MM
Modicon M262
Schneider Electric
5.3
0%
Mar 10CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends…
CVE-2025-11739
EP
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric
7.8
0%
Mar 10CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker…
CVE-2025-13957
EI
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Schneider Electric
7.5
1%
Mar 10CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator…
CVE-2026-1226
EB
EcoStruxure Building Operation Workstation
Schneider Electric
7.0
0%
Feb 11CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted…
CVE-2026-1227
EB
EcoStruxure Building Operation Workstation
Schneider Electric
7.0
0%
Feb 11CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or…
CVE-2025-13905
EP
EcoStruxure™ Process Expert for AVEVA System Platform
Schneider Electric
7.0
0%
Jan 29CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are…
CVE-2025-13845
EP
EcoStruxure Power Build Rapsody
Schneider Electric
7.8
0%
Jan 15CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody
CVE-2025-13844
EP
EcoStruxure Power Build Rapsody
Schneider Electric
5.3
0%
Jan 15CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody
CVE-2024-9409
PP
Powerlogic Pm5341 Firmware
Schneider-electric
7.5
1%
Nov 13CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP…
CVE-2024-10575
EI
Ecostruxure IT Gateway
Schneider-electric
9.8
1%
Nov 13CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices
CVE-2024-8422
ZS
Zelio Soft 2
Schneider-electric
7.8
0%
Oct 8CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a…
CVE-2024-8306
VD
Vijeo Designer
Schneider-electric
7.8
0%
Sep 11CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when…
CVE-2024-6407
WF
Whc-5918a Firmware
Schneider-electric
7.5
0%
Jul 11CWE-200: Information Exposure vulnerability exists that could cause disclosure of credentials when a specially crafted message is sent to the device
CVE-2024-6528
MM
Modicon M251 Firmware
Schneider-electric
6.1
0%
Jul 11CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site…
CVE-2024-5681
EF
Ecostruxure Foxboro Dcs Control Core Services
Schneider-electric
7.8
0%
Jul 11CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with…
CVE-2024-5680
EF
Ecostruxure Foxboro Dcs Control Core Services
Schneider-electric
5.5
0%
Jul 11CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program…
CVE-2024-5679
EF
Ecostruxure Foxboro Dcs Control Core Services
Schneider-electric
7.1
0%
Jul 11CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a…
CVE-2024-2602
FS
Foxrtu Station
Schneider-electric
7.8
0%
Jul 11CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user…
CVE-2024-5559
PP
Powerlogic P5 Firmware
Schneider-electric
6.8
0%
Jun 12CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay…
CVE-2024-2747
ES
Easergy Studio
Schneider-electric
7.8
0%
Jun 12CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the…
CVE-2024-0865
EI
Ecostruxure IT Gateway
Schneider-electric
7.8
0%
Jun 12CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user
CVE-2024-5560
SR
Sage Rtu Firmware
Schneider-electric
7.5
1%
Jun 12CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HTTP request
CVE-2024-5558
SA
Spacelogic As-b Firmware
Schneider-electric
6.4
0%
Jun 12CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account
CVE-2024-5557
SA
Spacelogic As-b Firmware
Schneider-electric
4.5
0%
Jun 12CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credentials when an attacker has access to the controller logs
CVE-2024-37040
SR
Sage Rtu Firmware
Schneider-electric
8.1
0%
Jun 12CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a…
CVE-2024-37039
SR
Sage Rtu Firmware
Schneider-electric
7.5
1%
Jun 12CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request