目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Schneider Electric 厂商漏洞列表 / CVE 中文分析 311

Schneider Electric 厂商相关 311 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

施耐德电气专注于能源管理与自动化领域，提供工业控制及楼宇控制系统。其软件产品历史漏洞多涉及远程代码执行、身份验证绕过及跨站脚本，常因配置不当或组件缺陷引发。近期安全事件凸显了关键基础设施面临的供应链风险，促使厂商加强固件签名验证与补丁分发机制。鉴于其广泛部署于电网及工厂，任何漏洞均可能影响物理安全，建议用户及时更新并实施网络隔离策略以缓解潜在威胁。

Top products by Schneider Electric: StruxureWare Data Center Expert PowerChute™ Serial Shutdown IGSS Data Server (IGSSdataServer.exe) EcoStruxure Control Expert IGSS Data Server(IGSSdataServer.exe) Modicon M340 CPU (part numbers BMXP34*) OPC UA Modicon Communication Module EcoStruxure™ IT Data Center Expert Modicon Controllers M241/M251 EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure Operator Terminal Expert Data Center Expert Sage 1410 Wiser Smart Wonderware Information Server Portal ClearSCADA ASCO 5310 Single-Channel Remote Annunciator APC Easy UPS Online Monitoring Software StruxureWare Data Center Expert EcoStruxure Power Commission Easergy P5 EVLink WallBox Easergy Studio Saitel DR RTU EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Conext™ ComBox Modicon Controllers M241 / M251 Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H EcoStruxure Power Monitoring Expert (PME) NetBotz 4 - 355/450/455/550/570
CVE ID 标题 CVSS 风险等级 Published
CVE-2022-30233 Schneider Electric PowerLogic ION Setup 输入验证错误漏洞 — Wiser Smart CWE-20 6.5 Medium 2022-06-02
CVE-2022-30232 Schneider Electric PowerLogic ION Setup 输入验证错误漏洞 — Power Logic ION Setup CWE-20 8.0 High 2022-06-02
CVE-2022-0221 Schneider Electric SCADAPack 代码问题漏洞 — SCADAPack Workbench CWE-611 5.5 Medium 2022-03-28
CVE-2021-22797 Schneider Electric EcoStruxure Control Expert 路径遍历漏洞 — EcoStruxure Control Expert CWE-22 7.8 High 2022-03-28
CVE-2021-22795 Schneider Electric StruxureWare Data Center Expert 操作系统命令注入漏洞 — StruxureWare Data Center Expert CWE-78 9.1 Critical 2022-03-28
CVE-2021-22794 Schneider Electric StruxureWare Data Center Expert 路径遍历漏洞 — StruxureWare Data Center Expert CWE-22 9.1 Critical 2022-03-28
CVE-2019-6834 Schneider Electric Software Update 代码问题漏洞 — Software Update (SESU) – SUT Service component CWE-502 7.3 High 2022-03-28
CVE-2022-24323 Schneider Electric EcoStruxure Control Expert和Schneider Electric EcoStruxure Process Exper 代码问题漏洞 — EcoStruxure Process Expert CWE-754 5.3 Medium 2022-03-09
CVE-2022-24322 Schneider Electric EcoStruxure Control Experta 缓冲区错误漏洞 — EcoStruxure Control Expert CWE-119 5.3 Medium 2022-03-09
CVE-2021-22783 Schneider Electric Ritto Wiser Door 安全漏洞 — Ritto Wiser Door CWE-200 8.8 High 2022-03-09
CVE-2022-22806 Schneider Electric 多款产品授权问题漏洞 — SmartConnect CWE-294 9.8 - 2022-03-09
CVE-2022-22805 Schneider Electric 多款产品缓冲区错误漏洞 — SmartConnect CWE-120 9.8 - 2022-03-09
CVE-2022-0715 多款Schneider Electric产品数据伪造问题漏洞 — APC Smart-UPS CWE-287 9.1 - 2022-03-09
CVE-2022-22722 Schneider Electric Easergy P5 信任管理问题漏洞 — Easergy P5 CWE-798 7.4 - 2022-02-04
CVE-2021-22716 Schneider Electric C-Bus Toolkit 权限许可和访问控制问题漏洞 — C-Bus Toolkit CWE-732 7.8 High 2021-04-13
CVE-2019-6852 多款Schneider Electric产品信息泄露漏洞 — Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions) CWE-200 7.5 - 2019-11-20
CVE-2019-6853 Schneider Electric Andover Continuum 跨站脚本漏洞 — Andover Continuum models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702 CWE-79 6.1 - 2019-11-20
CVE-2015-1014 Schneider Electric OPC Factory Server 安全漏洞 — OFS v3.5 CWE-427 7.8 - 2019-03-25
CVE-2018-7522 Schneider Electric Triconex Tricon MP 3008 安全漏洞 — Triconex Tricon CWE-119 9.8 - 2018-05-04
CVE-2018-8872 Schneider Electric Triconex Tricon MP 3008 安全漏洞 — Triconex Tricon CWE-119 8.1 - 2018-05-04
CVE-2017-6030 多款Schneider Electric Modicon产品安全特征问题漏洞 — Modicon M221 CWE-343 7.3 - 2017-06-30
CVE-2017-6034 Schneider Electric Modicon Modbus Protocol 安全漏洞 — Modicon Modbus Protocol CWE-294 9.8 - 2017-06-30
CVE-2014-9200 多款Schneider Electric产品DTM工具包基于栈的缓冲区溢出漏洞 — Unity Pro CWE-121 7.8 - 2015-02-01
CVE-2014-9197 Schneider Electric ETG3000 FactoryCast HMI Gateway 权限许可和访问控制漏洞 — ETG3000 FactoryCast HMI Gateway CWE-306 5.3 - 2015-01-27
CVE-2014-9198 编号重复 — ETG3000 FactoryCast HMI Gateway CWE-798 9.8 - 2015-01-27
CVE-2014-9190 Schneider Electric Wonderware InTouch Access Anywhere Server 基于栈的缓冲区溢出漏洞 — InTouch Access Anywhere Server CWE-121 9.8 - 2015-01-10
CVE-2014-9188 Schneider Electric ProClima MDraw30.ocx 缓冲区溢出漏洞 — ProClima CWE-77 9.8 - 2014-12-27
CVE-2014-0754 Schneider Electric Modicon PLC Ethernet模块目录遍历漏洞 — Ethernet modules for M340, Quantum and Premium PLC ranges 8.1 - 2014-10-03
CVE-2014-5411 Schneider Electric StruxureWare SCADA Expert ClearSCADA 跨站脚本漏洞 — ClearSCADA CWE-79 5.4 - 2014-09-18
CVE-2014-5412 Schneider Electric StruxureWare SCADA Expert ClearSCADA 权限许可和访问控制漏洞 — ClearSCADA CWE-287 6.5 - 2014-09-18

本页汇总了 Schneider Electric 厂商截至目前公开的全部 311 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。