Schneider-Electric vulnerabilities1 known to be exploited.
Schneider-Electric has 758 published vulnerabilities across 1,806 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Struxureware Data Center Expert, with 48. If you run Schneider-Electric software, patch the exploited flaws first.
The most recent Schneider-Electric flaw added to the known-exploited list is CVE-2018-7841, on 15 April 2022. We keep watching the known-exploited list.
Which Schneider-Electric products have the most vulnerabilities?
Struxureware Data Center Expert leads with 48 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Schneider-Electric vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Schneider Electric U.motion Builder SQL Injection Vulnerability
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
Which Schneider-Electric flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 73%
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.
- 70%CVE-2022-34753High
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised.
- 65%CVE-2021-22707Critical
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink...
- 61%CVE-2018-3639Medium
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an...
- 45%CVE-2022-24313Critical
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message.
- 41%CVE-2021-22719High
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded.
- 39%CVE-2021-22717High
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files.
- 37%CVE-2017-6019High
An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830.
- 37%CVE-2019-6814Critical
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker...
- 35%CVE-2023-5399Critical
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command.
All Schneider-Electric products we track.
253 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Struxureware Data Center Expertstruxureware_data_center_expert48 vulnerabilities11 versions
- Interactive Graphical SCADA Systeminteractive_graphical_scada_system43 vulnerabilities11 versions
- Modicon M340modicon_m34041 vulnerabilities6 versions
- Modicon M580 Firmwaremodicon_m580_firmware41 vulnerabilities7 versions
- Modicon M340 Firmwaremodicon_m340_firmware39 vulnerabilities3 versions
- Modicon M340 Bmxp342020 Firmwaremodicon_m340_bmxp342020_firmware32 vulnerabilities5 versions
- Modicon M340 Bmxp3420302 Firmwaremodicon_m340_bmxp3420302_firmware28 vulnerabilities6 versions
- Modicon M340 Bmxp341000 Firmwaremodicon_m340_bmxp341000_firmware27 vulnerabilities6 versions
- Ecostruxure Control Expertecostruxure_control_expert26 vulnerabilities7 versions
- Modicon M340 Bmxp342000 Firmwaremodicon_m340_bmxp342000_firmware25 vulnerabilities6 versions
- Modicon M340 Bmxp3420102 Firmwaremodicon_m340_bmxp3420102_firmware25 vulnerabilities6 versions
- Modicon Premiummodicon_premium25 vulnerabilities3 versions
- Modicon Quantum Firmwaremodicon_quantum_firmware25 vulnerabilities2 versions
- Easergy T300 Firmwareeasergy_t300_firmware24 vulnerabilities4 versions
- U.motion Builderu.motion_builder24 vulnerabilities2 versions
- Modicon Premium Firmwaremodicon_premium_firmware23 vulnerabilities1 version
- 140cpu65150 Firmware140cpu65150_firmware20 vulnerabilities3 versions
- Evlink City Evc1s22p4 Firmwareevlink_city_evc1s22p4_firmware18 vulnerabilities1 version
- Evlink City Evc1s7p4 Firmwareevlink_city_evc1s7p4_firmware18 vulnerabilities1 version
- Evlink Parking Evf2 Firmwareevlink_parking_evf2_firmware18 vulnerabilities1 version
- Evlink Parking Evw2 Firmwareevlink_parking_evw2_firmware18 vulnerabilities1 version
- Evlink Smart Wallbox Evb1a Firmwareevlink_smart_wallbox_evb1a_firmware18 vulnerabilities1 version
- Modicon M340 Bmxp3420102cl Firmwaremodicon_m340_bmxp3420102cl_firmware17 vulnerabilities3 versions
- Spacelynk Firmwarespacelynk_firmware17 vulnerabilities13 versions
This directory lists the 253 Schneider-Electric products with at least one tracked version, of 1,806 in our catalogue.
Running Schneider-Electric? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
- Matched to
- U.motion Builder on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 758 published vulnerabilities across 1,806 products and 1,218 versions from Schneider-Electric. The most recent Schneider-Electric flaw added to the known-exploited list is CVE-2018-7841, on 15 April 2022.
1 Schneider-Electric vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2018-7841. The full list is on this page.
Struxureware Data Center Expert, with 48 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Schneider-Electric products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.