Login Request a demo
SC
Vendor
Schneider-electric
1,133 products with CVEs on record
4,207
CVEs
1
On KEV
6
New 30D
Products
SR
Sage RTU 1410
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 1430
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 1450
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 2400
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 3030 Magnum
Schneider Electric
8.6
1 CVEs0 on KEV1 new
SR
Sage RTU 4400
Schneider Electric
8.6
1 CVEs0 on KEV1 new
UB
U.motion Builder
Schneider Electric
9.8
24 CVEs1 on KEV0 new
SD
StruxureWare Data Center Expert
Schneider Electric
9.8
47 CVEs0 on KEV0 new
IG
Interactive Graphical Scada System
Schneider-electric
9.8
43 CVEs0 on KEV0 new
MM
Modicon M580 Firmware
Schneider-electric
9.8
41 CVEs0 on KEV0 new
MM
Modicon M340 Firmware
Schneider-electric
9.8
39 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342020 Firmware
Schneider-electric
9.8
32 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420302 Firmware
Schneider-electric
9.8
28 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp341000 Firmware
Schneider-electric
9.8
27 CVEs0 on KEV0 new
EC
EcoStruxure Control Expert
Schneider Electric
9.8
26 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342000 Firmware
Schneider-electric
9.8
25 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420102 Firmware
Schneider-electric
9.8
25 CVEs0 on KEV0 new
MQ
Modicon Quantum Firmware
Schneider-electric
9.8
25 CVEs0 on KEV0 new
ET
Easergy T300 Firmware
Schneider-electric
9.8
24 CVEs0 on KEV0 new
MP
Modicon Premium Firmware
Schneider-electric
9.8
23 CVEs0 on KEV0 new
1F
140cpu65150 Firmware
Schneider-electric
9.8
20 CVEs0 on KEV0 new
EC
Evlink City Evc1s22p4 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EC
Evlink City Evc1s7p4 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EP
Evlink Parking Evf2 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EP
Evlink Parking Evw2 Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
ES
Evlink Smart Wallbox Evb1a Firmware
Schneider-electric
9.8
18 CVEs0 on KEV0 new
EP
EcoStruxure™ Power Monitoring Expert
Schneider Electric
9.8
17 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420102cl Firmware
Schneider-electric
9.8
17 CVEs0 on KEV0 new
SF
Spacelynk Firmware
Schneider-electric
9.8
17 CVEs0 on KEV0 new
EP
EcoStruxure™ Process Expert
Schneider Electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M221 Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342020h Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420302cl Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp3420302h Firmware
Schneider-electric
9.8
16 CVEs0 on KEV0 new
IF
Ibp1110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp219-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp319-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibp519-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Ibps110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp1110-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp1110-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp1110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp219-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp219-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp219-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp319-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp319-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp319-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp519-1 Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp519-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imp519-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imps110-1e Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
IF
Imps110-1er Firmware
Schneider-electric
9.8
15 CVEs0 on KEV0 new
BF
Bmxnoe0100 Firmware
Schneider-electric
9.8
14 CVEs0 on KEV0 new
BF
Bmxnoe0110 Firmware
Schneider-electric
9.8
14 CVEs0 on KEV0 new
BF
Bmxnor0200h Firmware
Schneider-electric
9.8
14 CVEs0 on KEV0 new
1F
140cpu65160 Firmware
Schneider-electric
9.8
13 CVEs0 on KEV0 new
EP
Evlink Parking Ev.2 Firmware
Schneider-electric
9.8
13 CVEs0 on KEV0 new
MM
Modicon M340 Bmxp342030 Firmware
Schneider-electric
9.8
13 CVEs0 on KEV0 new
1F
140cpu65260 Firmware
Schneider-electric
9.8
12 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-102250
SR
Sage RTU 1430
Schneider Electric
8.6
0%
Oct 13CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware…
CVE-2026-3869
MM
Modicon M580 Safety
Schneider Electric
9.2
1%
Sep 11CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an…
CVE-2026-81861
S3
SCADAPack 32
Schneider Electric
5.9
1%
Sep 11CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality
CVE-2026-77120
PT
PowerLogic T300
Schneider Electric
8.7
1%
Sep 9CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and…
CVE-2026-19233
EI
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Schneider Electric
8.6
1%
Sep 9CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged…
CVE-2026-8044
EI
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Schneider Electric
8.6
1%
Sep 9CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a…
CVE-2026-13348
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.9
1%
Sep 1CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an…
CVE-2026-13337
N5
NetBotz 5 - 750/755
Schneider Electric
5.1
0%
Sep 1CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the…
CVE-2026-13336
N5
NetBotz 5 - 750/755
Schneider Electric
7.3
2%
Sep 1CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system…
CVE-2024-10085
EM
EcoStruxure™ Modicon Communication Server
Schneider Electric
8.2
0%
Sep 1CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of…
CVE-2026-12927
ID
IGSS Definition (Def.exe)
Schneider Electric
8.4
0%
Jul 29CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS…
CVE-2026-0667
S4
SCADAPack 47x
Schneider Electric
9.3
1%
Jul 29CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity…
CVE-2026-14354
EC
EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric
8.7
0%
Jul 29CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to…
CVE-2026-9718
PP
PowerLogic™ P7
Schneider Electric
6.5
0%
Jun 25CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a…
CVE-2026-9717
PP
PowerLogic™ P7
Schneider Electric
7.2
2%
Jun 25CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated…
CVE-2026-9716
PP
PowerLogic™ P7
Schneider Electric
7.5
0%
Jun 25CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when…
CVE-2026-9651
ET
EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Schneider Electric
4.4
0%
Jun 25CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an…
CVE-2026-9650
ET
EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Schneider Electric
7.5
0%
Jun 25CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses…
CVE-2026-8045
EI
EcoStruxure™ IT Data Center Expert
Schneider Electric
6.5
0%
Jun 9CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a…
CVE-2026-6332
EM
Ecostruxure™ Machine Expert HVAC
Schneider Electric
7.5
0%
May 14Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
CVE-2026-6866
EP
EcoStruxure™ Panel Server
Schneider Electric
7.5
0%
May 12Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server
CVE-2026-6865
SD
Saitel DP Remote Terminal Unit & Controller
Schneider Electric
7.1
0%
May 12Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products
CVE-2026-4827
PP
PowerLogic™ P7 Protection and Control Platform
Schneider Electric
8.7
0%
May 12Insufficient Entropy vulnerability on Multiple Products
CVE-2026-2401
PS
PowerChute™ Serial Shutdown
Schneider Electric
5.0
0%
Apr 14CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious…
CVE-2026-2400
PS
PowerChute™ Serial Shutdown
Schneider Electric
4.3
0%
Apr 14CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the…
CVE-2026-2403
PS
PowerChute™ Serial Shutdown
Schneider Electric
4.3
0%
Apr 14CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user…
CVE-2026-2405
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.5
0%
Apr 14CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the…
CVE-2026-2402
PS
PowerChute™ Serial Shutdown
Schneider Electric
5.3
0%
Apr 14CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary…
CVE-2026-2404
PS
PowerChute™ Serial Shutdown
Schneider Electric
5.3
0%
Apr 14CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request…
CVE-2026-2399
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.1
0%
Apr 14CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web…
CVE-2026-4832
EM
Easergy MiCOM P849
Schneider Electric
6.9
0%
Apr 14CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to…
CVE-2026-2273
EA
EcoStruxure™ Automation Expert
Schneider Electric
8.2
0%
Mar 10CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could…
CVE-2026-1286
EF
EcoStruxure™ Foxboro DCS
Schneider Electric
6.5
0%
Mar 10CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an…
CVE-2025-13902
MC
Modicon Controllers M258/LMC058
Schneider Electric
5.4
0%
Mar 10CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have…
CVE-2025-13901
MM
Modicon M262
Schneider Electric
5.3
0%
Mar 10CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends…
CVE-2025-11739
EP
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric
7.8
0%
Mar 10CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker…
CVE-2025-13957
EI
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Schneider Electric
7.5
1%
Mar 10CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator…
CVE-2026-1226
EB
EcoStruxure Building Operation Webstation
Schneider Electric
7.0
0%
Feb 11CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted…
CVE-2026-1227
EB
EcoStruxure Building Operation Webstation
Schneider Electric
7.0
0%
Feb 11CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or…
CVE-2025-13905
EP
EcoStruxure™ Process Expert
Schneider Electric
7.0
0%
Jan 29CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are…
CVE-2025-13845
EP
EcoStruxure Power Build Rapsody
Schneider Electric
7.8
0%
Jan 15CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody
CVE-2025-13844
EP
EcoStruxure Power Build Rapsody
Schneider Electric
5.3
0%
Jan 15CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody
CVE-2025-11567
PS
PowerChute™ Serial Shutdown
Schneider Electric
7.3
0%
Nov 12CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured
CVE-2025-11566
PS
PowerChute™ Serial Shutdown
Schneider Electric
6.9
0%
Nov 12CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by…
CVE-2025-11565
PS
PowerChute™ Serial Shutdown
Schneider Electric
7.3
0%
Nov 12CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the…
CVE-2025-9997
SD
Saitel DR RTU
Schneider Electric
5.8
0%
Sep 9CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is…
CVE-2025-9996
SD
Saitel DR RTU
Schneider Electric
5.8
1%
Sep 9CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when…
CVE-2025-7746
AA
ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives
Schneider Electric
5.3
0%
Sep 9CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user…
CVE-2025-8448
EE
EcoStruxure Enterprise Server
Schneider Electric
1.0
0%
Aug 20CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able…
CVE-2025-8449
EE
EcoStruxure Enterprise Server
Schneider Electric
4.1
0%
Aug 20CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific…
CVE-2025-54927
EP
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric
4.9
1%
Aug 20CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an…
CVE-2025-54926
EP
EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
Schneider Electric
7.2
1%
Aug 20CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker…
CVE-2025-54925
EP
EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
Schneider Electric
7.5
0%
Aug 20CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a…
CVE-2025-54924
EP
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric
7.5
0%
Aug 20CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a…
CVE-2025-54923
EP
EcoStruxure™ Power Monitoring Expert (PME)
Schneider Electric
8.7
1%
Aug 20CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted…
CVE-2025-8453
SD
Saitel DP RTU
Schneider Electric
6.7
0%
Aug 20CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access…
CVE-2025-5296
SE
SESU
Schneider Electric
7.3
0%
Aug 18CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially…
CVE-2025-6625
MM
Modicon M340
Schneider Electric
7.5
0%
Aug 18CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device
CVE-2025-6788
EP
EcoStruxure™ Power Operation Advanced Reporting and Dashboards Module
Schneider Electric
5.3
0%
Jul 11A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with…
CVE-2025-50124
EI
EcoStruxure™ IT Data Center Expert
Schneider Electric
7.2
0%
Jul 11A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and…