Schneider Electric vulnerabilities
433 CVEs and advisories name Schneider Electric as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-7230A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Pr
- CVE-2018-7229A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unaut
- CVE-2018-7228A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unaut
- CVE-2018-7227A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrievi
- CVE-2017-9966A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior.
- CVE-2017-9965An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior.
- CVE-2017-9964A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1.
- CVE-2017-9962Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malform
- CVE-2017-9961A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code.
- CVE-2017-9960An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the syste
- CVE-2017-9958An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an impro
- CVE-2017-9957A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden
- CVE-2017-9956An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system
- CVE-2017-7974A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in w
- CVE-2017-7973A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated
- CVE-2017-7972A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2
- CVE-2017-7971A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2
- CVE-2017-7970A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2
- CVE-2017-7969A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistrib
- CVE-2017-6034Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay
- CVE-2017-6030Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
- CVE-2017-7966A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute
- CVE-2017-7965A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 fo
- CVE-2017-7967All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability whe
- CVE-2014-9200Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow
- CVE-2014-9198Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials
- CVE-2014-9197Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function
- CVE-2014-9190Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow
- CVE-2014-9188Schneider Electric ProClima Command Injection
- CVE-2014-0754Schneider Electric