Schneider Electric vulnerabilities
We track 200 vulnerabilities in Schneider Electric products across 60+ products. 200 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest Schneider Electric vulnerabilities
- 7.8 High severity
EcoStruxure Process Expert: Improper Privilege Management
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as server managing client request) that could cause a loss of Confidentiality, Integrity and Availability of engineering w
- 8.1 High severity
ASCO 5310 Single-Channel Remote Annunciator: Unrestricted Upload of File with Dangerous Type
CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded.
- 7.5 High severity
ASCO 5310 Single-Channel Remote Annunciator: Cleartext Transmission of Sensitive Information
CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker.
- 7.5 High severity
ASCO 5310 Single-Channel Remote Annunciator: Allocation of Resources Without Limits or Throttling
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device.
- 7.8 High severity
RemoteConnect and SCADAPack x70 Utilities: Deserialization of Untrusted Data
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when a non-admin authenticated user opens a malicious project file.
- 8.6 High severity
Modicon M340 processors (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted function
- 8.8 High severity
PowerLogic HDPM6000: Authorization Bypass Through User-Controlled Key
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges (Elevation of Privileges) when the attacker sends modified HTTPS requests to the d
- 7.8 High severity
Web Designer for BMXNOR0200H: Improper Restriction of XML External Entity Reference
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is import
- 7.1 High severity
Pro-face GP-Pro EX: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle atta
- 7.5 High severity
Modicon M580 CPU (part numbers BMEP* and…: Incorrect Calculation of Buffer Size
CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver.
- 8.8 High severity
Harmony (Formerly Magelis) HMIST6, HMISTM6…: Use of Unmaintained Third Party Components
CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product.
- 9.8 Critical severity
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service…
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device.
- 7.5 High severity
PowerLogic PM5320: Uncontrolled Resource Consumption
CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network.
- 8.1 High severity
Modicon M340 CPU (part numbers BMXP34*): Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper
- 7.5 High severity
Modicon M340 CPU (part numbers BMXP34*): Authentication Bypass by Spoofing
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attack between the controller and the engineering workstation whil
- 9.8 Critical severity
EcoStruxure IT Gateway: Missing Authorization
CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices.
- 7.5 High severity
Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To
- 7.8 High severity
Easergy Studio: Improper Privilege Management
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with
- 7.2 High severity
Data Center Expert: Improper Verification of Cryptographic Signature
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
- 7.3 High severity
EcoStruxure Power Monitoring Expert (PME): Deserialization of Untrusted Data
CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.
- 9.8 Critical severity
System Monitor application in Harmony…: Exposure of Sensitive Information to an Unauthorized Actor
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http
- 7.8 High severity
Zelio Soft 2: Use After Free
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file.
- 7.8 High severity
Vijeo Designer: Improper Privilege Management
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with t
- 7.5 High severity
Accutech Manager: Buffer Copy without Checking Size of Input
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause a crash of the Accutech Manager when receiving a specially crafted request over port 2536/TCP.
- 7.8 High severity
CWE-20: Improper Input Validation vulnerability exists that could cause local…
CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys
- 7.1 High severity
EcoStruxure Foxboro DCS Core Control Services: Out-of-bounds Write
CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
- 7.8 High severity
FoxRTU Station: Improper Limitation of a Pathname to a Restricted Directory
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor.
- 7.8 High severity
Easergy Studio: Unquoted Search Path or Element
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine.
- 7.5 High severity
Sage 1410: Out-of-bounds Read
CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HTTP request.
- 8.1 High severity
Sage 1410: Buffer Copy without Checking Size of Input
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a fault on the device when sending a malformed HTTP request.
- 7.5 High severity
Sage 1410: Unchecked Return Value
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request.
- 8.8 High severity
Sage 1410: Incorrect Default Permissions
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.
- 8.1 High severity
Sage 1410: Improper Limitation of a Pathname to a Restricted Directory
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted
- 9.8 Critical severity
Sage 1410: Out-of-bounds Write
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.
- 7.8 High severity
EcoStruxure Power Design - Ecodial: Deserialization of Untrusted Data
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious project file is loaded into the application by a valid user.
- 7.5 High severity
Easergy T200 (Modbus) Models: T200I, T200E…: Files or Directories Accessible to External Parties
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location.
- 9.8 Critical severity
Easergy T200 (Modbus) Models: T200I, T200E…: Improper Restriction of Excessive Authentication Attempts
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form.
- 8.2 High severity
Easergy T200 (Modbus) Models: T200I, T200E…: Improper Neutralization of Input During Web Page Generation
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an attacker injects then executes arbitrary malicious JavaScript code within the context of the product.
- 7.7 High severity
EcoStruxure Control Expert: Use of Hard-coded Credentials
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.
- 8.1 High severity
Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.