目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Schneider Electric 厂商漏洞列表 / CVE 中文分析 311

Schneider Electric 厂商相关 311 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

施耐德电气专注于能源管理与自动化领域，提供工业控制及楼宇控制系统。其软件产品历史漏洞多涉及远程代码执行、身份验证绕过及跨站脚本，常因配置不当或组件缺陷引发。近期安全事件凸显了关键基础设施面临的供应链风险，促使厂商加强固件签名验证与补丁分发机制。鉴于其广泛部署于电网及工厂，任何漏洞均可能影响物理安全，建议用户及时更新并实施网络隔离策略以缓解潜在威胁。

Top products by Schneider Electric: StruxureWare Data Center Expert PowerChute™ Serial Shutdown IGSS Data Server (IGSSdataServer.exe) EcoStruxure Control Expert IGSS Data Server(IGSSdataServer.exe) Modicon M340 CPU (part numbers BMXP34*) OPC UA Modicon Communication Module EcoStruxure™ IT Data Center Expert Modicon Controllers M241/M251 EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure Operator Terminal Expert Data Center Expert Sage 1410 Wiser Smart Wonderware Information Server Portal ClearSCADA ASCO 5310 Single-Channel Remote Annunciator APC Easy UPS Online Monitoring Software StruxureWare Data Center Expert EcoStruxure Power Commission Easergy P5 EVLink WallBox Easergy Studio Saitel DR RTU EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Conext™ ComBox Modicon Controllers M241 / M251 Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H EcoStruxure Power Monitoring Expert (PME) NetBotz 4 - 355/450/455/550/570
CVE ID 标题 CVSS 风险等级 Published
CVE-2024-10083 Schneider Electric EcoStruxure Control Expert、EcoStruxure Process Expert和OPC Factory Server 输入验证错误漏洞 — Uni-Telway driver CWE-20 5.5 Medium 2025-02-13
CVE-2024-8401 Schneider Electric EcoStruxure Power Monitoring Expert 跨站脚本漏洞 — EcoStruxure Power Monitoring Expert (PME) 2021 CWE-79 5.4 Medium 2025-01-28
CVE-2024-10498 Schneider Electric PowerLogic HDPM6000 缓冲区错误漏洞 — PowerLogic HDPM6000 CWE-119 6.5 Medium 2025-01-17
CVE-2024-10497 Schneider Electric PowerLogic HDPM6000 安全漏洞 — PowerLogic HDPM6000 CWE-639 8.8 High 2025-01-17
CVE-2024-12703 Schneider Electric RemoteConnect and SCADAPack 代码问题漏洞 — RemoteConnect and SCADAPack x70 Utilities CWE-502 7.8 High 2025-01-17
CVE-2024-12142 Schneider Electric Modicon M340 信息泄露漏洞 — Modicon M340 processors (part numbers BMXP34*) CWE-200 8.6 High 2025-01-17
CVE-2024-12476 Schneider Electric Web Designer 代码问题漏洞 — Web Designer for BMXNOR0200H CWE-611 7.8 High 2025-01-17
CVE-2024-12399 Schneider Electric Pro-face GP-Pro EX和Remote HMI 安全漏洞 — Pro-face GP-Pro EX CWE-924 7.1 High 2025-01-17
CVE-2024-11425 Schneider Electric Modicon M580 安全漏洞 — Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) CWE-131 7.5 High 2025-01-17
CVE-2024-11139 Schneider Electric EcoStruxure Power Build Rapsody 缓冲区错误漏洞 — EcoStruxure™ Power Build Rapsody CWE-119 7.3 - 2025-01-17
CVE-2024-11999 Schneider Electric多款产品 安全漏洞 — Harmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime CWE-1104 8.8 High 2024-12-17
CVE-2024-11737 Schneider Electric Modicon Controllers 输入验证错误漏洞 — Modicon Controllers M241 / M251 CWE-20 9.8 Critical 2024-12-11
CVE-2024-10511 Schneider Electric PowerChute Serial Shutdown 授权问题漏洞 — PowerChute Serial Shutdown CWE-287 5.3 Medium 2024-12-11
CVE-2024-10575 Schneider Electric EcoStruxure IT Gateway 安全漏洞 — EcoStruxure IT Gateway CWE-862 9.8 Critical 2024-11-13
CVE-2024-9409 Schneider Electric多款产品 资源管理错误漏洞 — PowerLogic PM5320 CWE-400 7.5 High 2024-11-13
CVE-2024-8936 Schneider Electric 输入验证错误漏洞 — Modicon M340 CPU (part numbers BMXP34*) CWE-20 6.5 Medium 2024-11-13
CVE-2024-8938 Schneider Electric Modicon M340 缓冲区错误漏洞 — Modicon M340 CPU (part numbers BMXP34*) CWE-119 8.1 High 2024-11-13
CVE-2024-8937 Schneider Electric Modicon M340 缓冲区错误漏洞 — Modicon M340 CPU (part numbers BMXP34*) CWE-119 6.5 Medium 2024-11-13
CVE-2024-8935 Schneider Electric Modicon M340 安全漏洞 — Modicon M340 CPU (part numbers BMXP34*) CWE-290 7.5 High 2024-11-13
CVE-2024-8933 Schneider Electric Modicon M340 安全漏洞 — Modicon M340 CPU (part numbers BMXP34*) CWE-924 7.5 High 2024-11-13
CVE-2024-8070 Schneider Electric EVlink Home Smart和Schneider Charge 安全漏洞 — EVlink Home Smart CWE-312 8.5 High 2024-10-13
CVE-2024-8530 Schneider Electric Data Center Expert 访问控制错误漏洞 — Data Center Expert CWE-306 5.9 Medium 2024-10-11
CVE-2024-8531 Schneider Electric Data Center Expert 数据伪造问题漏洞 — Data Center Expert CWE-347 7.2 High 2024-10-11
CVE-2024-9002 Schneider Electric Easergy Studio 安全漏洞 — Easergy Studio CWE-269 7.8 High 2024-10-11
CVE-2024-8884 Schneider Electric System Monitor application 信息泄露漏洞 — System Monitor application in Harmony Industrial PC HMIBMO/HMIBMI/HMIPSO/HMIBMP/HMIBMU/HMIPSP/HMIPEP series CWE-200 9.8 Critical 2024-10-08
CVE-2024-9005 Schneider Electric EcoStruxure Power Monitoring Expert 代码问题漏洞 — EcoStruxure Power Monitoring Expert (PME) CWE-502 9.8AI Critical AI 2024-10-08
CVE-2024-8518 Schneider Electric Zelio Soft 输入验证错误漏洞 — Zelio Soft 2 CWE-20 3.3 Low 2024-10-08
CVE-2024-8422 Schneider Electric Zelio Soft 资源管理错误漏洞 — Zelio Soft 2 CWE-416 7.8 High 2024-10-08
CVE-2024-8306 Schneider Electric Vijeo Designer 安全漏洞 — Vijeo Designer CWE-269 7.8 High 2024-09-11
CVE-2024-6918 Schneider Electric Accutech Manager 安全漏洞 — Accutech Manager CWE-120 7.5 High 2024-08-20

本页汇总了 Schneider Electric 厂商截至目前公开的全部 311 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。