Vulnerability index

Browse CVEs

159 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

66074 Mge Network Management Card Transverse CRITICAL 9.1
CVE-2018-7245

An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.…

Mitigation only
Fix from $2,300 2018-04-18
140cpu65150 Firmware HIGH 8.8
CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code executio…

Mitigation only
Fix from $1,950 2018-04-18
Bmxnor0200 Firmware HIGH 7.5
CVE-2018-7759

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vu…

Mitigation only
Fix from $1,950 2018-04-18
Bmxnor0200 Firmware HIGH 7.5
CVE-2018-7762

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNO…

Mitigation only
Fix from $1,950 2018-04-18
Micom P141 Firmware MEDIUM 6.5
CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with …

Mitigation only
Fix from $1,600 2018-04-18
66074 Mge Network Management Card Transverse MEDIUM 5.3
CVE-2018-7244

An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.…

Mitigation only
Fix from $1,600 2018-04-18
Powerscada Anywhere HIGH 8.1
CVE-2017-9963

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with…

Mitigation only
Fix from $1,950 2018-02-12
Pro Face Gp Pro Ex HIGH 7.8
CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code …

Mitigation only
Fix from $1,950 2017-09-26
Wonderware Archestra Logger HIGH 8.6
CVE-2017-9627

An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The …

Mitigation only
Fix from $1,950 2017-07-07
Modbus Firmware CRITICAL 9.8
CVE-2017-6034EPSS 5%

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted i…

No fix yet
Fix from $2,300 2017-06-30
Bmxnoc0401 Firmware HIGH 7.5
CVE-2017-6017

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP3…

Mitigation only
Fix from $1,950 2017-06-30
Modbus Firmware MEDIUM 5.3
CVE-2017-6032

A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session…

Mitigation only
Fix from $1,600 2017-06-30
Somachine HIGH 8.8
CVE-2017-7966

A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary…

Mitigation only
Fix from $1,950 2017-06-07
Somachine Hvac HIGH 7.3
CVE-2017-7965

A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon…

Mitigation only
Fix from $1,950 2017-06-07
Modicon Tm221ce16r Firmware CRITICAL 9.8
CVE-2017-7574

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project …

Mitigation only
Fix from $2,300 2017-04-06
Modicon Tm221ce16r Firmware CRITICAL 9.8
CVE-2017-7575

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x…

No fix yet
Fix from $2,300 2017-04-06
Wonderware Historian HIGH 7.3
CVE-2017-5155

An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default pass…

Mitigation only
Fix from $1,950 2017-02-13
Magelis Gtu Universal Panel Firmware HIGH 7.5
CVE-2016-8374

An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all version…

Mitigation only
Fix from $1,950 2017-02-13
Magelis Gtu Universal Panel Firmware MEDIUM 5.3
CVE-2016-8367

An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all version…

Mitigation only
Fix from $1,600 2017-02-13
Connexium Firmware CRITICAL 10.0
CVE-2016-8352

An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versio…

Mitigation only
Fix from $2,300 2017-02-13
Ion5000 CRITICAL 9.8
CVE-2016-5815

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 ser…

Mitigation only
Fix from $2,300 2017-02-13
Ion5000 HIGH 8.8
CVE-2016-5809

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 ser…

No fix yet
Fix from $1,950 2017-02-13
Telvent Rtu Firmware MEDIUM 5.3
CVE-2015-6485

Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3…

Mitigation only
Fix from $1,600 2016-03-12
Bmxnoc0401 HIGH 10.0
CVE-2015-7937EPSS 7%

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to exec…

Mitigation only
Fix from $1,950 2015-12-21
Somachine HIGH 7.5
CVE-2014-9200EPSS 6%

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modb…

Mitigation only
Fix from $1,950 2015-02-01
Wonderware Intouch Access Anywhere Server HIGH 10.0
CVE-2014-9190EPSS 6%

Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrar…

Mitigation only
Fix from $1,950 2015-01-10
Ofs Test Client Tlxcdlfofs33 MEDIUM 6.9
CVE-2014-0774

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLU…

Mitigation only
Fix from $1,600 2014-02-28
Floating License Manager MEDIUM 5.9
CVE-2014-0759

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges v…

Mitigation only
Fix from $1,600 2014-02-28
Telvent Sage 3030 Firmware MEDIUM 5.0
CVE-2013-6143

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of ser…

Mitigation only
Fix from $1,600 2014-01-31
Tburjr900 HIGH 9.3
CVE-2013-2782

Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different cust…

Mitigation only
Fix from $1,950 2013-08-28