Schneider Electric vulnerabilities
433 CVEs and advisories name Schneider Electric as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-1060CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic
- CVE-2025-1059CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious pa
- CVE-2025-1058CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is do
- CVE-2024-10083CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver in
- CVE-2024-8401CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated atta
- CVE-2024-10498CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow an unauthorized attac
- CVE-2024-10497CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outs
- CVE-2024-12703CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote c
- CVE-2024-12142CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restrict
- CVE-2024-12476CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts worksta
- CVE-2024-12399CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause part
- CVE-2024-11425CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated
- CVE-2024-11139CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to ex
- CVE-2024-11999CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authentica
- CVE-2024-11737CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of th
- CVE-2024-10511CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local netwo
- CVE-2024-10575CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacti
- CVE-2024-9409CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communica
- CVE-2024-8936CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Ma
- CVE-2024-8938CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary
- CVE-2024-8937CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary
- CVE-2024-8935CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integri
- CVE-2024-8933CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retr
- CVE-2024-8070CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary
- CVE-2024-8530CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generat
- CVE-2024-8531CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an
- CVE-2024-9002CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and av
- CVE-2024-8884CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attac
- CVE-2024-9005CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely de
- CVE-2024-8518CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted pro