Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Schneider Electric — Vulnerabilities & Security Advisories 311

Browse all 311 CVE security advisories affecting Schneider Electric. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Schneider Electric operates as a global specialist in energy management and industrial automation, providing critical infrastructure solutions for data centers, buildings, and manufacturing facilities. Its extensive product portfolio, including programmable logic controllers and supervisory control and data acquisition systems, has historically been associated with a significant volume of vulnerabilities, currently totaling 287 Common Vulnerabilities and Exposures. These security flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from legacy protocols or default configurations in industrial control interfaces. While the company has implemented various security patches and guidelines, the sheer scale of its connected ecosystem presents persistent attack surfaces. Notable incidents have highlighted risks in unpatched firmware and weak authentication mechanisms within its EcoStruxure platform, underscoring the critical need for rigorous network segmentation and continuous monitoring to mitigate potential disruptions to essential operational technology environments.

Found 4 results / 311 Clear Filters
Top products by Schneider Electric: StruxureWare Data Center Expert PowerChute™ Serial Shutdown IGSS Data Server (IGSSdataServer.exe) EcoStruxure Control Expert IGSS Data Server(IGSSdataServer.exe) Modicon M340 CPU (part numbers BMXP34*) OPC UA Modicon Communication Module EcoStruxure™ IT Data Center Expert Modicon Controllers M241/M251 EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure Operator Terminal Expert Data Center Expert Sage 1410 Wiser Smart Wonderware Information Server Portal ClearSCADA ASCO 5310 Single-Channel Remote Annunciator APC Easy UPS Online Monitoring Software StruxureWare Data Center Expert EcoStruxure Power Commission Easergy P5 EVLink WallBox Easergy Studio Saitel DR RTU EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Conext™ ComBox Modicon Controllers M241 / M251 Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H EcoStruxure Power Monitoring Expert (PME) NetBotz 4 - 355/450/455/550/570
CVE ID Title CVSS Severity Published
CVE-2025-5743 Schneider Electric EVLink WallBox 操作系统命令注入漏洞 — EVLink WallBox CWE-78 5.5 Medium 2025-06-10
CVE-2025-5742 Schneider Electric EVLink WallBox 跨站脚本漏洞 — EVLink WallBox CWE-79 5.4 Medium 2025-06-10
CVE-2025-5741 Schneider Electric EVLink WallBox 路径遍历漏洞 — EVLink WallBox CWE-22 4.9 Medium 2025-06-10
CVE-2025-5740 Schneider Electric EVLink WallBox 路径遍历漏洞 — EVLink WallBox CWE-22 7.2 High 2025-06-10

This page lists every published CVE security advisory associated with Schneider Electric. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.