Schneider Electric vulnerabilities
We track 200 vulnerabilities in Schneider Electric products across 60+ products. 200 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest Schneider Electric vulnerabilities
- 7.1 High severity
EcoStruxure Control Expert: Insufficiently Protected Credentials
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation.
- 7.8 High severity
Easergy Studio: Deserialization of Untrusted Data
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object.
- 7.1 High severity
Easy UPS Online Monitoring Software: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker.
- 9.8 Critical severity
C-Bus Toolkit: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command.
- 9.8 Critical severity
EcoStruxure Power Monitoring Expert: Deserialization of Untrusted Data
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application.
- 9.8 Critical severity
C-Bus Toolkit: Improper Privilege Management
A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.
- 7.8 High severity
IGSS Update Service (IGSSupdateservice.exe): Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicio
- 7.8 High severity
Accutech Manager: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local function call.
- 7.2 High severity
StruxureWare Data Center Expert: Improper Control of Generation of Code
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.
- 7.2 High severity
StruxureWare Data Center Expert: Improper Control of Generation of Code
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.
- 8.8 High severity
StruxureWare Data Center Expert: Improper Neutralization of Special Elements used in an SQL Command
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unautho
- 8.8 High severity
StruxureWare Data Center Expert: Improper Neutralization of Special Elements used in an SQL Command
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unautho
- 7.8 High severity
IGSS Dashboard (DashBoard.exe): Deserialization of Untrusted Data
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file.
- 7.8 High severity
EcoStruxure Foxboro DCS Control Core Services: Improper Validation of Array Index
A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in
- 7.8 High severity
EcoStruxure Foxboro DCS Control Core Services: Out-of-bounds Write
A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys
- 7.8 High severity
EcoStruxure™ Operator Terminal Expert: Improper Control of Generation of Code
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.
- 9.8 Critical severity
PowerLogic ION9000: Cleartext Transmission of Sensitive Information
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
- 7.5 High severity
Modicon M340 CPU (part numbers BMXP34*): Improper Check for Unusual or Exceptional Conditions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
- 8.8 High severity
A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated…
A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.
- 9.8 Critical severity
PowerLogic HDPM6000: Improper Validation of Array Index
A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial of service or remote code execution.
- 7.5 High severity
APC Easy UPS Online Monitoring Software…: Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor service.
- 9.8 Critical severity
APC Easy UPS Online Monitoring Software…: Improper Neutralization of Special Elements used in an OS Command
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.
- 9.8 Critical severity
APC Easy UPS Online Monitoring Software…: Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.
- 8.8 High severity
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker…
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account.
- 8.1 High severity
StruxureWare Data Center Expert: Improper Neutralization of Special Elements used in an OS Command
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to execute unprivileged shell commands on the appliance over SSH. Affected products: St
- 7.8 High severity
StruxureWare Data Center Expert: Improper Neutralization of Special Elements used in an OS Command
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance when a maliciously crafted Operating System command is entered on the device. Af
- 8.1 High severity
StruxureWare Data Center Expert: Missing Authorization
A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: S
- 9.8 Critical severity
StruxureWare Data Center Expert: Improper Control of Generation of Code
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostname” parameter when maliciously crafted hostname syntax is entered. Affected products: StruxureWare Data Center Expert (V7.
- 9.8 Critical severity
StruxureWare Data Center Expert: Improper Control of Generation of Code
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings endpoint. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
- 8.8 High severity
StruxureWare Data Center Expert: Incorrect Authorization
A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
- 7.5 High severity
NetBotz 4 - 355/450/455/550/570: Improper Restriction of Excessive Authentication Attempts
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior)
- 8.8 High severity
Merten INSTABUS Tastermodul 1fach System M…: Improper Authentication
A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.
- 8.8 High severity
EcoStruxure Control Expert: Exposure of Resource to Wrong Sphere
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)
- 8.8 High severity
A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a…
A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens a malicious report file planted by an attacker. Affected Products: IGSS Data Serv
- 8.8 High severity
IGSS Data Server(IGSSdataServer.exe): Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.
- 7.8 High severity
IGSS Data Server(IGSSdataServer.exe): Deserialization of Untrusted Data
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file. Affect
- 8.8 High severity
IGSS Data Server(IGSSdataServer.exe): Insufficient Verification of Data Authenticity
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP por
- 8.8 High severity
IGSS Data Server(IGSSdataServer.exe): Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS project report directory, this could lead to remote code execution when a victim
- 7.8 High severity
EcoStruxure Power Commission: Improper Authorization
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power
- 7.8 High severity
APC Easy UPS Online Monitoring Software: Use of Hard-coded Credentials
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2