Browse all 311 CVE security advisories affecting Schneider Electric. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Schneider Electric operates as a global specialist in energy management and industrial automation, providing critical infrastructure solutions for data centers, buildings, and manufacturing facilities. Its extensive product portfolio, including programmable logic controllers and supervisory control and data acquisition systems, has historically been associated with a significant volume of vulnerabilities, currently totaling 287 Common Vulnerabilities and Exposures. These security flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from legacy protocols or default configurations in industrial control interfaces. While the company has implemented various security patches and guidelines, the sheer scale of its connected ecosystem presents persistent attack surfaces. Notable incidents have highlighted risks in unpatched firmware and weak authentication mechanisms within its EcoStruxure platform, underscoring the critical need for rigorous network segmentation and continuous monitoring to mitigate potential disruptions to essential operational technology environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-27975 | Schneider Electric Modicon M340 安全漏洞 — EcoStruxure Control Expert CWE-522 | 7.1 | High | 2024-02-14 |
| CVE-2023-6409 | Schneider Electric Modicon M340 信任管理问题漏洞 — EcoStruxure Control Expert CWE-798 | 7.7 | High | 2024-02-14 |
| CVE-2023-1548 | Schneider Electric EcoStruxure Control Expert 安全漏洞 — EcoStruxure Control Expert CWE-269 | 5.5 | Medium | 2023-04-18 |
| CVE-2023-27976 | Schneider Electric EcoStruxure Control Expert 安全漏洞 — EcoStruxure Control Expert CWE-668 | 8.8 | High | 2023-04-18 |
| CVE-2022-37302 | Schneider Electric EcoStruxure Control Expert 缓冲区错误漏洞 — EcoStruxure Control Expert CWE-119 | 5.5 | Medium | 2022-09-13 |
| CVE-2022-37300 | 多款Schneider Electric产品授权问题漏洞 — EcoStruxure Control Expert CWE-640 | 9.8 | Critical | 2022-09-12 |
| CVE-2021-22797 | Schneider Electric EcoStruxure Control Expert 路径遍历漏洞 — EcoStruxure Control Expert CWE-22 | 7.8 | High | 2022-03-28 |
| CVE-2022-24322 | Schneider Electric EcoStruxure Control Experta 缓冲区错误漏洞 — EcoStruxure Control Expert CWE-119 | 5.3 | Medium | 2022-03-09 |
This page lists every published CVE security advisory associated with Schneider Electric. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.