目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Schneider Electric 厂商漏洞列表 / CVE 中文分析 311

Schneider Electric 厂商相关 311 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

施耐德电气专注于能源管理与自动化领域，提供工业控制及楼宇控制系统。其软件产品历史漏洞多涉及远程代码执行、身份验证绕过及跨站脚本，常因配置不当或组件缺陷引发。近期安全事件凸显了关键基础设施面临的供应链风险，促使厂商加强固件签名验证与补丁分发机制。鉴于其广泛部署于电网及工厂，任何漏洞均可能影响物理安全，建议用户及时更新并实施网络隔离策略以缓解潜在威胁。

Top products by Schneider Electric: StruxureWare Data Center Expert PowerChute™ Serial Shutdown IGSS Data Server (IGSSdataServer.exe) EcoStruxure Control Expert IGSS Data Server(IGSSdataServer.exe) Modicon M340 CPU (part numbers BMXP34*) OPC UA Modicon Communication Module EcoStruxure™ IT Data Center Expert Modicon Controllers M241/M251 EcoStruxure™ Power Monitoring Expert (PME) EcoStruxure Operator Terminal Expert Data Center Expert Sage 1410 Wiser Smart Wonderware Information Server Portal ClearSCADA ASCO 5310 Single-Channel Remote Annunciator APC Easy UPS Online Monitoring Software StruxureWare Data Center Expert EcoStruxure Power Commission Easergy P5 EVLink WallBox Easergy Studio Saitel DR RTU EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Conext™ ComBox Modicon Controllers M241 / M251 Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H EcoStruxure Power Monitoring Expert (PME) NetBotz 4 - 355/450/455/550/570
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-28003 Schneider Electric EcoStruxure Power Monitoring Expert 代码问题漏洞 — EcoStruxure Power Monitoring Expert CWE-613 6.7 Medium 2023-04-18
CVE-2023-25555 Schneider Electric StruxureWare Data Center Expert 操作系统命令注入漏洞 — StruxureWare Data Center Expert CWE-78 5.6 Medium 2023-04-18
CVE-2023-25553 Schneider Electric StruxureWare Data Center Expert 跨站脚本漏洞 — StruxureWare Data Center Expert CWE-79 6.1 Medium 2023-04-18
CVE-2023-25551 Schneider Electric StruxureWare Data Center Expert 跨站脚本漏洞 — StruxureWare Data Center Expert CWE-79 6.1 Medium 2023-04-18
CVE-2023-25550 Schneider Electric StruxureWare Data Center Expert 代码注入漏洞 — StruxureWare Data Center Expert CWE-94 7.2 High 2023-04-18
CVE-2023-25549 Schneider Electric StruxureWare Data Center Expert 代码注入漏洞 — StruxureWare Data Center Expert CWE-94 7.2 High 2023-04-18
CVE-2023-25554 Schneider Electric StruxureWare Data Center Expert 操作系统命令注入漏洞 — StruxureWare Data Center Expert CWE-78 7.8 High 2023-04-18
CVE-2023-25552 Schneider Electric StruxureWare Data Center Expert 安全漏洞 — StruxureWare Data Center Expert CWE-862 8.1 High 2023-04-18
CVE-2023-25548 Schneider Electric StruxureWare Data Center Expert 安全漏洞 — StruxureWare Data Center Expert CWE-863 8.8 High 2023-04-18
CVE-2023-25547 Schneider Electric StruxureWare Data Center Expert 安全漏洞 — StruxureWare Data Center Expert CWE-863 8.8 High 2023-04-18
CVE-2022-43378 Schneider Electric NetBotz 安全漏洞 — NetBotz 4 - 355/450/455/550/570 CWE-1021 6.5 Medium 2023-04-18
CVE-2022-43377 Schneider Electric NetBotz 安全漏洞 — NetBotz 4 - 355/450/455/550/570 CWE-307 7.5 High 2023-04-18
CVE-2022-43376 Schneider Electric NetBotz 跨站脚本漏洞 — NetBotz 4 - 355/450/455/550/570 CWE-79 7.6 High 2023-04-18
CVE-2022-34755 Schneider Electric Easergy Builder 代码问题漏洞 — Easergy Builder Installer CWE-427 6.3 Medium 2023-04-18
CVE-2023-25556 Schneider Electric StruxureWare Data Center Expert 授权问题漏洞 — Merten INSTABUS Tastermodul 1fach System M 625199 CWE-287 8.3 High 2023-04-18
CVE-2023-1548 Schneider Electric EcoStruxure Control Expert 安全漏洞 — EcoStruxure Control Expert CWE-269 5.5 Medium 2023-04-18
CVE-2023-27976 Schneider Electric EcoStruxure Control Expert 安全漏洞 — EcoStruxure Control Expert CWE-668 8.8 High 2023-04-18
CVE-2023-27977 Schneider Electric IGSS Data Server 数据伪造问题漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-345 6.5 Medium 2023-03-21
CVE-2023-27978 Schneider Electric IGSS Data Server代码问题漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-502 7.8 High 2023-03-21
CVE-2023-27979 Schneider Electric IGSS Data Server 数据伪造问题漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-345 6.5 Medium 2023-03-21
CVE-2023-27980 Schneider Electric IGSS Data Server 访问控制错误漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-306 8.8 High 2023-03-21
CVE-2023-27981 Schneider Electric IGSS Data Server 路径遍历漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-22 7.8 High 2023-03-21
CVE-2023-27982 Schneider Electric IGSS Data Server 数据伪造问题漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-345 8.8 High 2023-03-21
CVE-2023-27983 Schneider Electric IGSS Data Server 访问控制错误漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-306 6.5 Medium 2023-03-21
CVE-2023-27984 Schneider Electric IGSS Data Server 输入验证错误漏洞 — IGSS Data Server(IGSSdataServer.exe) CWE-20 7.8 High 2023-03-21
CVE-2023-0595 EcoStruxure Geo SCADA Expert 安全漏洞 — EcoStruxure Geo SCADA Expert 2019 CWE-117 5.3 Medium 2023-02-24
CVE-2021-22786 多款Schneider Electric产品 信息泄露漏洞 — Modicon M340 CPU (part numbers BMXP34*) CWE-200 7.5 High 2023-02-01
CVE-2022-2329 Schneider Electric IGSS Data Server 输入验证错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-190 9.8 Critical 2023-02-01
CVE-2022-24324 Schneider Electric IGSS Data Server 缓冲区错误漏洞 — IGSS Data Server (IGSSdataServer.exe) CWE-120 9.8 Critical 2023-02-01
CVE-2022-4062 Schneider Electric EcoStruxure Power Commission 授权问题漏洞 — EcoStruxure Power Commission CWE-285 7.8 High 2023-02-01

本页汇总了 Schneider Electric 厂商截至目前公开的全部 311 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。