目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Schneider Electric 厂商漏洞列表 / CVE 中文分析 311

Schneider Electric 厂商相关 311 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

施耐德电气专注于能源管理与自动化领域，提供工业控制及楼宇控制系统。其软件产品历史漏洞多涉及远程代码执行、身份验证绕过及跨站脚本，常因配置不当或组件缺陷引发。近期安全事件凸显了关键基础设施面临的供应链风险，促使厂商加强固件签名验证与补丁分发机制。鉴于其广泛部署于电网及工厂，任何漏洞均可能影响物理安全，建议用户及时更新并实施网络隔离策略以缓解潜在威胁。

Top products by Schneider Electric: StruxureWare Data Center Expert PowerChute™ Serial Shutdown IGSS Data Server (IGSSdataServer.exe) EcoStruxure Control Expert IGSS Data Server(IGSSdataServer.exe) Modicon M340 CPU (part numbers BMXP34*) OPC UA Modicon Communication Module EcoStruxure™ IT Data Center Expert Modicon Controllers M241/M251 EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure Operator Terminal Expert Data Center Expert Sage 1410 Wiser Smart Wonderware Information Server Portal ClearSCADA ASCO 5310 Single-Channel Remote Annunciator APC Easy UPS Online Monitoring Software StruxureWare Data Center Expert EcoStruxure Power Commission Easergy P5 EVLink WallBox Easergy Studio Saitel DR RTU EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Conext™ ComBox Modicon Controllers M241 / M251 Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H EcoStruxure Power Monitoring Expert (PME) NetBotz 4 - 355/450/455/550/570
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-50121 Schneider Electric EcoStruxure IT Data Center Expert 操作系统命令注入漏洞 — EcoStruxure™ IT Data Center Expert CWE-78 9.8AI Critical AI 2025-07-11
CVE-2025-6438 Schneider Electric EcoStruxure IT Data Center Expert 代码问题漏洞 — EcoStruxure™ IT Data Center Expert CWE-611 8.1AI High AI 2025-07-11
CVE-2025-3117 Schneider Electric Modicon Controllers 跨站脚本漏洞 — Modicon Controllers M241/M251 CWE-79 5.4 Medium 2025-06-10
CVE-2025-3116 Schneider Electric Modicon Controllers 输入验证错误漏洞 — Modicon Controllers M241/M251 CWE-20 6.5 Medium 2025-06-10
CVE-2025-3905 Schneider Electric Modicon Controllers 跨站脚本漏洞 — Modicon Controllers M241/M251 CWE-79 5.4 Medium 2025-06-10
CVE-2025-3112 Schneider Electric Modicon Controllers 资源管理错误漏洞 — Modicon Controllers M241/M251 CWE-400 6.5 Medium 2025-06-10
CVE-2025-3899 Schneider Electric Modicon Controllers 跨站脚本漏洞 — Modicon Controllers M241/M251 CWE-79 5.4 Medium 2025-06-10
CVE-2025-3898 Schneider Electric Modicon Controllers 输入验证错误漏洞 — Modicon Controllers M241/M251 CWE-20 6.5 Medium 2025-06-10
CVE-2025-5743 Schneider Electric EVLink WallBox 操作系统命令注入漏洞 — EVLink WallBox CWE-78 5.5 Medium 2025-06-10
CVE-2025-5742 Schneider Electric EVLink WallBox 跨站脚本漏洞 — EVLink WallBox CWE-79 5.4 Medium 2025-06-10
CVE-2025-5741 Schneider Electric EVLink WallBox 路径遍历漏洞 — EVLink WallBox CWE-22 4.9 Medium 2025-06-10
CVE-2025-5740 Schneider Electric EVLink WallBox 路径遍历漏洞 — EVLink WallBox CWE-22 7.2 High 2025-06-10
CVE-2025-2875 Schneider Electric多款产品 安全漏洞 — Modicon Controllers M241 / M251 CWE-610 7.5 High 2025-05-14
CVE-2025-3916 Schneider Electric EcoStruxure Power Build Rapsody 安全漏洞 — EcoStruxure™ Power Build Rapsody software CWE-121 7.8AI High AI 2025-05-13
CVE-2025-2442 Schneider Electric Trio Q Licensed Data Radio 安全漏洞 — Trio Q Licensed Data Radio CWE-1188 6.8 Medium 2025-04-09
CVE-2025-2441 Schneider Electric Trio Q Licensed Data Radio 安全漏洞 — Trio Q Licensed Data Radio CWE-1188 4.6 Medium 2025-04-09
CVE-2025-2440 Schneider Electric Trio Q Licensed Data Radio 安全漏洞 — Trio Q Licensed Data Radio CWE-922 4.2 Medium 2025-04-09
CVE-2025-2223 Schneider Electric ConneXium Network Manager 输入验证错误漏洞 — ConneXium Network Manager CWE-20 7.8 High 2025-04-09
CVE-2025-2222 Schneider Electric ConneXium Network Manager 安全漏洞 — ConneXium Network Manager CWE-552 7.8 High 2025-04-09
CVE-2025-1960 Schneider Electric WebHMI 安全漏洞 — WebHMI – Deployed with EcoStruxure Power Automation System CWE-1188 9.8 Critical 2025-03-12
CVE-2025-0813 Schneider Electric EcoStruxure Power Automation System User Interface 授权问题漏洞 — EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions CWE-287 6.8 Medium 2025-03-12
CVE-2025-2002 Schneider Electric EcoStruxure Panel Server 日志信息泄露漏洞 — EcoStruxure Panel Server CWE-532 6.0 Medium 2025-03-12
CVE-2025-0814 Schneider Electric Enerlin 输入验证错误漏洞 — Enerlin’X IFE interface (LV434001) CWE-20 5.3 Medium 2025-02-13
CVE-2025-0815 Schneider Electric Enerlin 输入验证错误漏洞 — Enerlin’X IFE interface (LV434001) CWE-20 6.5 Medium 2025-02-13
CVE-2025-0816 Schneider Electric Enerlin 输入验证错误漏洞 — Enerlin’X IFE interface (LV434001) CWE-20 6.5 Medium 2025-02-13
CVE-2025-0327 Schneider Electric EcoStruxure Process Expert 安全漏洞 — EcoStruxure Process Expert CWE-269 7.8 High 2025-02-13
CVE-2025-1070 Schneider Electric ASCO 5310和ASCO 5350 代码问题漏洞 — ASCO 5310 Single-Channel Remote Annunciator CWE-434 8.1 High 2025-02-13
CVE-2025-1060 Schneider Electric ASCO 5310和ASCO 5350 安全漏洞 — ASCO 5310 Single-Channel Remote Annunciator CWE-319 7.5 High 2025-02-13
CVE-2025-1059 Schneider Electric ASCO 5310 安全漏洞 — ASCO 5310 Single-Channel Remote Annunciator CWE-770 7.5 High 2025-02-13
CVE-2025-1058 Schneider Electric ASCO 5310和ASCO 5350 安全漏洞 — ASCO 5310 Single-Channel Remote Annunciator CWE-494 8.1 High 2025-02-13

本页汇总了 Schneider Electric 厂商截至目前公开的全部 311 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。