Schneider Electric vulnerabilities, page 3
711 vulnerabilities
Known vulnerabilities in Schneider Electric products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 899 products.
HighCVE-2018-7234schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate.EPSS0.96%CriticalCVE-2018-7229schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.EPSS2.19%HighCVE-2018-7838modicon · modicon m580 cpu - bmep582040 all versions before v2.90 and modicon ethernet module bmenoc0301 all versions before v2.16 +13 moremodicon modicon m580 cpu - bmep582040 all versions before v2.90 and modicon ethernet module bmenoc0301 all versions before v2.16A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service.EPSS1.12%HighCVE-2018-7768schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the tpl input parameter.EPSS0.97%HighCVE-2018-7837schneider electric se · iiot monitor 3.1.38 +1 moreschneider electric se iiot monitor 3.1.38An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.EPSS1.20%HighCVE-2018-7794schneider electric se · modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions) +29 moreschneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions)A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.EPSS1.40%MediumCVE-2018-7822schneider-electric · modicon_m221_firmwareschneider-electric modicon_m221_firmwareAn Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic.EPSS0.31%CriticalCVE-2018-7761schneider electric se · modicon m340, modicon premium, modicon quantum, bmxnor0202 +57 moreschneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0202A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.EPSS2.10%HighCVE-2018-7817schneider electric se · zelio soft 2 v5.1 and prior versions +1 moreschneider electric se zelio soft 2 v5.1 and prior versionsA Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file.EPSS3.04%HighCVE-2018-7857schneider-electric · modicon_m340_firmware +3 moreschneider-electric modicon_m340_firmwareA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.EPSS1.58%HighCVE-2018-7855schneider-electric · modicon_m340_firmware +3 moreschneider-electric modicon_m340_firmwareA CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over ModbusEPSS2.65%CriticalCVE-2018-7829schneider-electric · d6220_firmware +58 moreschneider-electric d6220_firmwareAn Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.EPSS1.69%HighCVE-2018-7835schneider electric se · iiot monitor 3.1.38 +1 moreschneider electric se iiot monitor 3.1.38An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user.EPSS1.76%CriticalCVE-2018-7820schneider electric se · apc ups network management card 2 aos +4 moreschneider electric se apc ups network management card 2 aosA Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.EPSS1.03%CriticalCVE-2018-7799schneider electric se · schneider electric software update (sesu), all versions prior to v2.2.0 +1 moreschneider electric se schneider electric software update (sesu), all versions prior to v2.2.0A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file.EPSS2.79%HighCVE-2018-7793schneider electric se · foxview hmi scada (all foxboro dcs, foxboro evo, and ia series versions prior to foxboro dcs control core services 9.4 (ccs 9.4) and foxview 10.5.) +4 moreschneider electric se foxview hmi scada (all foxboro dcs, foxboro evo, and ia series versions prior to foxboro dcs control core services 9.4 (ccs 9.4) and foxview 10.5.)A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) which could cause unauthorized disclosure, modification, or disruption in service when the password is modified without permission.EPSS0.32%HighCVE-2018-7832schneider electric se · pro-face gp-pro ex v4.08 and previous versions +1 moreschneider electric se pro-face gp-pro ex v4.08 and previous versionsAn Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched.EPSS2.20%HighCVE-2018-7828schneider-electric · d6220_firmware +58 moreschneider-electric d6220_firmwareA Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.EPSS0.57%CriticalCVE-2018-7233schneider electric se · pelco sarix professional +20 moreschneider electric se pelco sarix professionalA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'model_name' or 'mac_address'.EPSS2.05%HighCVE-2018-7815schneider electric se · eurotherm by schneider electric guicon v2.0 (gold build 683.0) +1 moreschneider electric se eurotherm by schneider electric guicon v2.0 (gold build 683.0)A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on c3core.dll which could cause remote code to be executed when parsing a GD1 fileEPSS1.14%