Browse all 311 CVE security advisories affecting Schneider Electric. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Schneider Electric operates as a global specialist in energy management and industrial automation, providing critical infrastructure solutions for data centers, buildings, and manufacturing facilities. Its extensive product portfolio, including programmable logic controllers and supervisory control and data acquisition systems, has historically been associated with a significant volume of vulnerabilities, currently totaling 287 Common Vulnerabilities and Exposures. These security flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from legacy protocols or default configurations in industrial control interfaces. While the company has implemented various security patches and guidelines, the sheer scale of its connected ecosystem presents persistent attack surfaces. Notable incidents have highlighted risks in unpatched firmware and weak authentication mechanisms within its EcoStruxure platform, underscoring the critical need for rigorous network segmentation and continuous monitoring to mitigate potential disruptions to essential operational technology environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-2875 | Schneider Electric多款产品 安全漏洞 — Modicon Controllers M241 / M251 CWE-610 | 7.5 | High | 2025-05-14 |
| CVE-2024-11737 | Schneider Electric Modicon Controllers 输入验证错误漏洞 — Modicon Controllers M241 / M251 CWE-20 | 9.8 | Critical | 2024-12-11 |
| CVE-2024-6528 | Schneider Electric Modicon Controllers 跨站脚本漏洞 — Modicon Controllers M241 / M251 CWE-79 | 5.4 | Medium | 2024-07-11 |
This page lists every published CVE security advisory associated with Schneider Electric. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.