Schneider Electric vulnerabilities
We track 200 vulnerabilities in Schneider Electric products across 60+ products. 200 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest Schneider Electric vulnerabilities
- 7.5 High severity
OPC UA Modicon Communication Module: Improper Restriction of Operations within the Bounds of a Memory Buffer
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service when parsing the URL. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Commu
- 7.5 High severity
OPC UA Modicon Communication Module: Insufficient Verification of Data Authenticity
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due to improper verification of the firmware signature. Affected Products: X80 advanced RTU Communication Module (BMENOR2200
- 7.5 High severity
OPC UA Modicon Communication Module: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Co
- 7.5 High severity
OPC UA Modicon Communication Module: NULL Pointer Dereference
A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communicatio
- 7.5 High severity
OPC UA Modicon Communication Module: Loop with Unreachable Exit Condition
A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserver due to improper handling of the cookies. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0),
- 7.5 High severity
OPC UA Modicon Communication Module: Out-of-bounds Write
A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Communication M
- 9.8 Critical severity
Easergy P5: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 (V01.401.102 and prior)
- 8.8 High severity
SpaceLogic C-Bus Home Controller: Improper Neutralization of Special Elements used in an OS Command
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller (5200WHC2), form
- 7.8 High severity
Geo SCADA Mobile: Exposure of Resource to Wrong Sphere
A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious application
- 8.8 High severity
Wiser Smart: Improper Authentication
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
- 7.5 High severity
Wiser Smart: Missing Encryption of Sensitive Data
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be recovered when an attacker breaks the encoding. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
- 8.2 High severity
Wiser Smart: Incorrect Resource Transfer Between Spheres
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
- 9.8 Critical severity
Wiser Smart: Improper Restriction of Excessive Authentication Attempts
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
- 9.8 Critical severity
Wiser Smart: Use of Hard-coded Credentials
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
- 8.8 High severity
A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote…
A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attacker is able to intercept and modify a request on the same network or has configuration access to an ION device on the network. Affected Produ
- 9.8 Critical severity
Xmill: Out-of-bounds Write
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21
- 9.8 Critical severity
SmartConnect: Authentication Bypass by Capture-replay
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a malformed connection is sent. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), S
- 9.8 Critical severity
SmartConnect: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execution when an improperly handled TLS packet is reassembled. Affected Product: SmartConnect Family: SMT Series (SMT Series ID
- 9.1 Critical severity
APC Smart-UPS: Insufficient Verification of Data Authenticity
A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series (SMT Series ID=18:
- 7.5 High severity
ClearSCADA (All Versions), EcoStruxure Geo…: Improper Check for Unusual or Exceptional Conditions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Exp
- 7.5 High severity
ClearSCADA (All Versions), EcoStruxure Geo…: Inadequate Encryption Strength
A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Missing Authorization
A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Improper Initialization
A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Out-of-bounds Read
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Out-of-bounds Read
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical S
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code exec
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Integer Overflow or Wraparound
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interac
- 9.8 Critical severity
Easergy P40 Series model numbers with Ethernet…: Use of Hard-coded Credentials
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with
- 8.1 High severity
spaceLYnk (V2.6.2 and prior), Wiser for KNX…: Cross-Site Request Forgery
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceL
- 9.8 Critical severity
spaceLYnk (V2.6.2 and prior), Wiser for KNX…: Improper Restriction of Excessive Authentication Attempts
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (forme
- 8.8 High severity
EcoStruxure EV Charging Expert (formerly known…: Cross-Site Request Forgery
A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. Affected Produc
- 7.4 High severity
EcoStruxure EV Charging Expert (formerly known…: Improper Restriction of Rendered UI Layers or Frames
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Product:
- 8.8 High severity
A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated…
A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link
- 8.8 High severity
Easergy P3 (All versions prior to V30.205): Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions an
- 7.5 High severity
Modicon M340 CPUs: BMXP34 (All Versions): Uncontrolled Resource Consumption
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CP
- 8.8 High severity
Easergy P5 (All firmware versions prior to…: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions an
- 7.5 High severity
Easergy P5: Use of Hard-coded Credentials
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product
- 9.8 Critical severity
Schneider Electric U.motion Builder SQL Injection Exploited
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.