Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Schneider Electric — Vulnerabilities & Security Advisories 311

Browse all 311 CVE security advisories affecting Schneider Electric. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Schneider Electric operates as a global specialist in energy management and industrial automation, providing critical infrastructure solutions for data centers, buildings, and manufacturing facilities. Its extensive product portfolio, including programmable logic controllers and supervisory control and data acquisition systems, has historically been associated with a significant volume of vulnerabilities, currently totaling 287 Common Vulnerabilities and Exposures. These security flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from legacy protocols or default configurations in industrial control interfaces. While the company has implemented various security patches and guidelines, the sheer scale of its connected ecosystem presents persistent attack surfaces. Notable incidents have highlighted risks in unpatched firmware and weak authentication mechanisms within its EcoStruxure platform, underscoring the critical need for rigorous network segmentation and continuous monitoring to mitigate potential disruptions to essential operational technology environments.

Found 10 results / 311 Clear Filters
Top products by Schneider Electric: StruxureWare Data Center Expert PowerChute™ Serial Shutdown IGSS Data Server (IGSSdataServer.exe) EcoStruxure Control Expert IGSS Data Server(IGSSdataServer.exe) Modicon M340 CPU (part numbers BMXP34*) OPC UA Modicon Communication Module EcoStruxure™ IT Data Center Expert Modicon Controllers M241/M251 EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure Operator Terminal Expert Data Center Expert Sage 1410 Wiser Smart Wonderware Information Server Portal ClearSCADA ASCO 5310 Single-Channel Remote Annunciator APC Easy UPS Online Monitoring Software StruxureWare Data Center Expert EcoStruxure Power Commission Easergy P5 EVLink WallBox Easergy Studio Saitel DR RTU EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Conext™ ComBox Modicon Controllers M241 / M251 Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H EcoStruxure Power Monitoring Expert (PME) NetBotz 4 - 355/450/455/550/570
CVE ID Title CVSS Severity Published
CVE-2022-2329 Schneider Electric IGSS Data Server 输入验证错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-190 9.8 Critical 2023-02-01
CVE-2022-24324 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-02-01
CVE-2022-32522 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30
CVE-2022-32523 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30
CVE-2022-32524 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30
CVE-2022-32525 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30
CVE-2022-32526 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30
CVE-2022-32527 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30
CVE-2022-32528 Schneider Electric IGSS Data Server 访问控制错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-306 8.6 High 2023-01-30
CVE-2022-32529 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-01-30

This page lists every published CVE security advisory associated with Schneider Electric. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.