Schneider Electric vulnerabilities
433 CVEs and advisories name Schneider Electric as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-50125A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server
- CVE-2025-50123A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a pri
- CVE-2025-50122A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reve
- CVE-2025-50121A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause u
- CVE-2025-6438A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls
- CVE-2025-3117CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration fi
- CVE-2025-3116CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special
- CVE-2025-3905CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system varia
- CVE-2025-3112CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user send
- CVE-2025-3899CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on We
- CVE-2025-3898CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS r
- CVE-2025-5743CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause rem
- CVE-2025-5742CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user
- CVE-2025-5741CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file
- CVE-2025-5740CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file
- CVE-2025-2875CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality whe
- CVE-2025-3916CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially
- CVE-2025-2442CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to unauthorized access whic
- CVE-2025-2441CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confidentiality when a malic
- CVE-2025-2440CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized access of confidential d
- CVE-2025-2223CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering
- CVE-2025-2222CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privi
- CVE-2025-1960CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized co
- CVE-2025-0813CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission
- CVE-2025-2002CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP server credentials wh
- CVE-2025-0814CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services running on the product whe
- CVE-2025-0815CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are s
- CVE-2025-0816CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sen
- CVE-2025-0327CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as
- CVE-2025-1070CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file