Schneider Electric vulnerabilities
We track 200 vulnerabilities in Schneider Electric products across 60+ products. 200 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest Schneider Electric vulnerabilities
- 8.6 High severity
Sage RTU 1410: Insufficient Verification of Data Authenticity
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
- 9.2 Critical severity
Modicon M580: Incorrect Implementation of Authentication Algorithm
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.
- 8.6 High severity
EcoStruxure™ IT Data Center Expert (Formerly…: Improper Neutralization of Argument Delimiters in a Command
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parame
- 8.7 High severity
PowerLogic T300: Improper Neutralization of Special Elements used in an OS Command
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH ena
- 8.6 High severity
EcoStruxure™ IT Data Center Expert (Formerly…: Server-Side Request Forgery
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.
- 7.3 High severity
NetBotz 5 - 750/755: Improper Neutralization of Special Elements used in an OS Command
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified.
- 8.2 High severity
EcoStruxure™ OPC UA Server Expert: Allocation of Resources Without Limits or Throttling
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.
- 8.7 High severity
EcoStruxure™ Cybersecurity Admin Expert: Insufficiently Protected Credentials
CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in th
- 8.4 High severity
IGSS Definition (Def.exe): Out-of-bounds Write
CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.
- 9.3 Critical severity
SCADAPack 47x: Improper Check for Unusual or Exceptional Conditions
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.
- 7.2 High severity
PowerLogic™ P7: Improper Neutralization of Special Elements used in an OS Command
CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a pri
- 7.5 High severity
PowerLogic™ P7: NULL Pointer Dereference
CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.
- 7.5 High severity
EasyLogic T150 (formerly Saitel DR) Remote…: Insufficiently Protected Credentials
CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker co
- 7.5 High severity
Ecostruxure™ Machine Expert HVAC: Cleartext Storage of Sensitive Information
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the sour
- 7.5 High severity
EcoStruxure™ Panel Server: Initialization of a Resource with an Insecure Default
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using
- 7.1 High severity
EasyLogic T150 (formerly Saitel DR) Remote…: Improper Limitation of a Pathname to a Restricted Directory
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.
- 8.7 High severity
Easergy MiCOM C264: Insufficient Entropy
CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.
- 8.2 High severity
EcoStruxure™ Automation Expert: Improper Control of Generation of Code
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confiden
- 7.5 High severity
EcoStruxure™ IT Data Center Expert (Formerly…: Use of Hard-coded Credentials
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by d
- 7.8 High severity
EcoStruxure™ Power Monitoring Expert (PME): Deserialization of Untrusted Data
CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.
- 7.0 High severity
EcoStruxure Building Operation Workstation: Improper Restriction of XML External Entity Reference
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or denial of service conditions when a local user uploads a specially crafted TGML g
- 7.0 High severity
EcoStruxure Building Operation Workstation: Improper Control of Generation of Code
CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted design content is processed through a TGML graphics file.
- 7.0 High severity
EcoStruxure™ Process Expert: Incorrect Default Permissions
CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service
- 7.8 High severity
EcoStruxure Power Build Rapsody: Use After Free
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
- 7.3 High severity
PowerChute™ Serial Shutdown: Incorrect Default Permissions
CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured.
- 7.3 High severity
PowerChute™ Serial Shutdown: Improper Limitation of a Pathname to a Restricted Directory
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload.
- 7.2 High severity
EcoStruxure™ Power Monitoring Expert (PME): Improper Limitation of a Pathname to a Restricted Directory
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker with admin privileges uploads a malicious file over HTTP which then gets executed.
- 7.5 High severity
EcoStruxure™ Power Monitoring Expert (PME): Server-Side Request Forgery
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a malicious url.
- 7.5 High severity
EcoStruxure™ Power Monitoring Expert (PME): Server-Side Request Forgery
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulnerable endpoint.
- 8.7 High severity
EcoStruxure™ Power Monitoring Expert (PME): Deserialization of Untrusted Data
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization.
- 7.3 High severity
SESU: Improper Link Resolution Before File Access
CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application
- 7.2 High severity
EcoStruxure™ IT Data Center Expert: Improper Privilege Management
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a setup script.
- 7.2 High severity
EcoStruxure™ IT Data Center Expert: Improper Control of Generation of Code
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account when the server is accessed via a console and through exploitation of the hostname input.
- 8.9 High severity
EcoStruxure™ IT Data Center Expert: Insufficient Entropy
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artifacts.
- 9.5 Critical severity
EcoStruxure™ IT Data Center Expert: Improper Neutralization of Special Elements used in an OS Command
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause unauthenticated remote code execution when a malicious folder is created over the web interface HTTP when enabled. HTTP i
- 7.2 High severity
EVLink WallBox: Improper Limitation of a Pathname to a Restricted Directory
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path.
- 7.5 High severity
Modicon Controllers M241 / M251: Externally Controlled Reference to a Resource in Another Sphere
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources.
- 7.8 High severity
CWE-20: Improper Input Validation vulnerability exists that could cause a loss of…
CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when a malicious project file is loaded by a user from the local system.
- 7.8 High severity
ConneXium Network Manager: Files or Directories Accessible to External Parties
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation following man in the middle attack.
- 9.8 Critical severity
WebHMI – Deployed with EcoStruxure Power…: Initialization of a Resource with an Insecure Default
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized commands when a system’s default password credentials have not been changed on first use. The default username is not disp