Schneider Electric vulnerabilities
We track 200 vulnerabilities in Schneider Electric products across 60+ products. 200 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest Schneider Electric vulnerabilities
- 7.8 High severity
APC Easy UPS Online Monitoring Software: Incorrect Permission Assignment for Critical Resource
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 1
- 9.8 Critical severity
APC Easy UPS Online Monitoring Software: Unrestricted Upload of File with Dangerous Type
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Serve
- 9.8 Critical severity
APC Easy UPS Online Monitoring Software: Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring S
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Integer Overflow or Wraparound
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS D
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGS
- 7.5 High severity
EcoStruxure Geo SCADA Expert 2019 - 2021…: Exposure of Sensitive Information to an Unauthorized Actor
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert
- 7.5 High severity
EcoStruxure Geo SCADA Expert 2019 - 2021…: Incorrect Authorization
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.
- 9.8 Critical severity
EcoStruxure Control Expert: Authentication Bypass by Capture-replay
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions),
- 8.3 High severity
EcoStruxure™ Cybersecurity Admin Expert (CAE): Improper Certificate Validation
A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into t
- 8.1 High severity
EcoStruxure™ Cybersecurity Admin Expert (CAE): Authentication Bypass by Spoofing
A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Adm
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS
- 9.1 Critical severity
IGSS Data Server (IGSSdataServer.exe): Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory, potentially leading to a denial-of-service condition when an attacker sends specifi
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm cache data messages. Affected Products: IGSS
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted setting value messages. Affected Products: IGSS Dat
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm data messages. Affected Products: IGSS Data S
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted time reduced data messages. Affected Products: IGSS
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted online data request messages. Affected Products: IG
- 9.8 Critical severity
IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted mathematically reduced data request messages. Affec
- 8.8 High severity
Data Center Expert: Deserialization of Untrusted Data
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert (Versions prior to V7.9.0)
- 9.8 Critical severity
Data Center Expert: Insufficiently Protected Credentials
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert
- 9.8 Critical severity
Data Center Expert: Insufficiently Protected Credentials
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)
- 9.8 Critical severity
Data Center Expert: Insufficiently Protected Credentials
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32520. Affected Products: Data Center Expert
- 9.8 Critical severity
Conext™ ComBox: Improper Restriction of Excessive Authentication Attempts
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account when the product does not implement a rate limit mechanism on the admin authentication form. Affected
- 9.8 Critical severity
C-Bus Network Automation Controller, LSS5500NAC: Improper Authentication
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page. Affected Products: C-Bus Network Automation Controller - LSS5500NAC (Versions prior to V1.10.0), Wiser for C-Bus Au
- 9.8 Critical severity
C-Bus Network Automation Controller, LSS5500NAC: Weak Password Requirements
A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker brute forces the password. Affected Products: C-Bus Network Automation Controller - LSS5500NAC (Versions prior to V1.10.0),
- 7.8 High severity
CanBRASS: Improper Restriction of Operations within the Bounds of a Memory Buffer
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause remote code execution when a command which exploits this vulnerability is utilized. Affected Products: CanBRASS (Versions prior to V7.5.1)
- 7.5 High severity
EcoStruxure Power Commission: Exposure of Resource to Wrong Sphere
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: Ec
- 9.8 Critical severity
EcoStruxure Power Commission: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and caus
- 9.8 Critical severity
EcoStruxure Power Commission: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause unauthentica
- 9.8 Critical severity
EcoStruxure Control Expert: Improper Check for Unusual or Exceptional Conditions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Prod
- 7.5 High severity
SoMachine HVAC: Out-of-bounds Write
A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – H
- 7.5 High severity
Modicon M340 CPUs: Improper Privilege Management
A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40),
- 7.5 High severity
Modicon M340 CPU (part numbers BMXP34*): Integer Underflow (Wrap or Wraparound)
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 a
- 7.8 High severity
EcoStruxure Operator Terminal Expert: Improper Neutralization of Special Elements used in an SQL Command
A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in ex
- 7.8 High severity
EcoStruxure Operator Terminal Expert: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code
- 7.8 High severity
EcoStruxure Operator Terminal Expert: Improper Verification of Cryptographic Signature
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStr
- 7.8 High severity
EcoStruxure Operator Terminal Expert: Incorrect Type Conversion or Cast
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure
- 7.8 High severity
EcoStruxure Operator Terminal Expert: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStru
- 7.8 High severity
EcoStruxure Operator Terminal Expert: Improper Verification of Cryptographic Signature
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert
- 9.8 Critical severity
EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Un