Schneider Electric SE vulnerabilities, page 4
117 vulnerabilities
Known vulnerabilities in Schneider Electric SE products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 49 products.
CVE-2018-7806schneider electric sedata center operation all versions
EPSS score1.25%
Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code.CVE-2018-7814schneider electric seeurotherm by schneider electric guicon v2.0 (gold build 683.0)+1EPSS score1.23%
A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) which could cause remote code to be executed when parsing a GD1 fileCVE-2018-7235schneider electric sepelco sarix professional+20EPSS score1.63%
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'CVE-2018-7836schneider electric seiiot monitor 3.1.38+1EPSS score31.98%
An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files.CVE-2018-7807schneider electric sedata center expert versions 7.5.0 and earlier+1EPSS score1.25%
Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code.CVE-2018-7232schneider electric sepelco sarix professional+20EPSS score2.05%
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'network.ieee8021x.delete_certs'.CVE-2018-7810schneider electric seembedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200EPSS score0.90%
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.CVE-2018-7242schneider electric semodicon premium, modicon quantum, modicon m340, bmxnor0200+57EPSS score1.88%
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.CVE-2018-7236schneider electric sepelco sarix professional+20EPSS score1.33%
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.CVE-2018-7238schneider electric sepelco sarix professional+20EPSS score2.77%
A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.CVE-2018-7795schneider electric sepowerlogic - pm5560 prior to fw version 2.5.4+1EPSS score2.32%
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.CVE-2018-7839schneider electric seiiot monitor 3.1.38+1EPSS score0.33%
A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure.CVE-2018-7246schneider electric se66074 mge network management card transverse installed in mge ups and mge sts+1EPSS score0.84%
A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (Port 80/443/TCP) of the affected devices could allow remote attackers to discover an administrative account. If default on device, it is not using a SSL in settings and if multiple request of the page "Access Control" (IP-address device/ups/pas_cont.htm) account data will be sent in cleartextCVE-2018-7804schneider electric seembedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200EPSS score0.86%
A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.CVE-2018-7770schneider electric seu.motion+1EPSS score1.30%
The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address.CVE-2018-7769schneider electric seu.motion+1EPSS score0.97%
The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.CVE-2018-7791schneider electric semodicon m221, all references, all versions prior to firmware v1.6.2.0+1EPSS score1.90%
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to overwrite the original password with their password. If an attacker exploits this vulnerability and overwrite the password, the attacker can upload the original program from the PLC.CVE-2018-7244schneider electric se66074 mge network management card transverse installed in mge ups and mge sts+1EPSS score1.04%
An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to obtain sensitive device information if network access was obtained.CVE-2018-7790schneider electric semodicon m221, all references, all versions prior to firmware v1.6.2.0+1EPSS score2.48%
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.CVE-2018-7781schneider electric sepelco sarix professional v1+20EPSS score0.59%
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.