Schneider Electric vulnerabilities, page 3
320 vulnerabilities
Known vulnerabilities in Schneider Electric products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 306 products.
CVE-2025-0327schneider electricecostruxure process expert+1
EPSS score0.17%
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit
trail data and the other acting as server managing client request) that could cause a loss of Confidentiality,
Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the
executable path of the windows services. To be exploited, services need to be restarted.CVE-2025-0815schneider electricenerlin’x eife (lv851001)+1EPSS score0.24%
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the
product when malicious ICMPV6 packets are sent to the device.CVE-2025-0814schneider electricenerlin’x eife (lv851001)+1EPSS score0.38%
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network
services running on the product when malicious IEC61850-MMS packets are sent to the device. The core
functionality of the breaker remains intact during the attack.CVE-2025-9997schneider electricsaitel dp rtu+1EPSS score0.49%
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.CVE-2025-9996schneider electricsaitel dp rtu+1EPSS score0.52%
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.CVE-2025-7746schneider electricats490 altivar soft starter+7EPSS score0.43%
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser.CVE-2025-5741schneider electricevlink wallboxEPSS score0.63%
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that
could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an
authenticated session of the web server.CVE-2025-5742schneider electricevlink wallboxEPSS score0.26%
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
vulnerability exists when an authenticated user modifies configuration parameters on the web serverCVE-2025-5296schneider electricsesuEPSS score0.22%
CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause
arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file
corruption, exposure of application and system information or persistent denial of service when a low-privileged
attacker tampers with the installation folder.CVE-2025-5740schneider electricevlink wallboxEPSS score0.75%
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path.CVE-2025-5743schneider electricevlink wallboxEPSS score0.91%
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability exists that could cause remote control over the charging station when an authenticated user
modifies configuration parameters on the web server.CVE-2025-6788schneider electricecostruxure™ power monitoring expert+1EPSS score0.33%
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources
to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML
diagrams.CVE-2025-6625schneider electricbmxngd0100: m580 global data module+5EPSS score0.50%
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific
crafted FTP command is sent to the device.CVE-2025-6438schneider electricecostruxure™ it data center expertEPSS score0.45%
A
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could
cause manipulation of SOAP API calls and XML external entities injection resulting in unauthorized file access
when the server is accessed via the network using an application account.CVE-2025-8453schneider electricsaitel dp rtu+1EPSS score0.19%
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and
arbitrary code execution when a privileged engineer user with console access modifies a configuration file
used by a root-level daemon to execute custom scripts.CVE-2025-8449schneider eelctricecostruxure building operation workstation+2EPSS score0.26%
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.CVE-2025-8448schneider eelctricecostruxure building operation enterprise server+2EPSS score0.20%
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.CVE-2025-3112schneider electricmodicon controllers m241/m251EPSS score0.63%
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an
authenticated malicious user sends manipulated HTTPS Content-Length header to the webserver.CVE-2025-3905schneider electricmodicon controllers m241/m251+1EPSS score0.30%
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
exists impacting PLC system variables that could cause an unvalidated data injected by authenticated
malicious user leading to modify or read data in a victim’s browser.CVE-2025-3916schneider electricecostruxure™ power build rapsody softwareEPSS score0.20%
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to
exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD
file) provided by the attacker.