Browse CVEs

CRITICAL 9.1 CVE-2018-7245 An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.… 66074 Mge Network Management Card Transverse Mitigation only Fix from $2,3002018-04-18 HIGH 8.8 CVE-2018-7240 A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code executio… 140cpu65150 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2018-7759 A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vu… Bmxnor0200 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2018-7762 A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNO… Bmxnor0200 Firmware Mitigation only Fix from $1,9502018-04-18 MEDIUM 6.5 CVE-2018-7758 A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with … Micom P141 Firmware Mitigation only Fix from $1,6002018-04-18 MEDIUM 5.3 CVE-2018-7244 An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.… 66074 Mge Network Management Card Transverse Mitigation only Fix from $1,6002018-04-18 HIGH 8.1 CVE-2017-9963 A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with… Powerscada Anywhere Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-9961 A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code … Pro Face Gp Pro Ex Mitigation only Fix from $1,9502017-09-26 HIGH 8.6 CVE-2017-9627 An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The … Wonderware Archestra Logger Mitigation only Fix from $1,9502017-07-07 CRITICAL 9.8 CVE-2017-6034EPSS 5% An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted i… Modbus Firmware No fix yet Fix from $2,3002017-06-30 HIGH 7.5 CVE-2017-6017 A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP3… Bmxnoc0401 Firmware Mitigation only Fix from $1,9502017-06-30 MEDIUM 5.3 CVE-2017-6032 A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session… Modbus Firmware Mitigation only Fix from $1,6002017-06-30 HIGH 8.8 CVE-2017-7966 A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary… Somachine Mitigation only Fix from $1,9502017-06-07 HIGH 7.3 CVE-2017-7965 A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon… Somachine Hvac Mitigation only Fix from $1,9502017-06-07 CRITICAL 9.8 CVE-2017-7574 Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project … Modicon Tm221ce16r Firmware Mitigation only Fix from $2,3002017-04-06 CRITICAL 9.8 CVE-2017-7575 Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x… Modicon Tm221ce16r Firmware No fix yet Fix from $2,3002017-04-06 HIGH 7.3 CVE-2017-5155 An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default pass… Wonderware Historian Mitigation only Fix from $1,9502017-02-13 HIGH 7.5 CVE-2016-8374 An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all version… Magelis Gtu Universal Panel Firmware Mitigation only Fix from $1,9502017-02-13 MEDIUM 5.3 CVE-2016-8367 An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all version… Magelis Gtu Universal Panel Firmware Mitigation only Fix from $1,6002017-02-13 CRITICAL 10.0 CVE-2016-8352 An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versio… Connexium Firmware Mitigation only Fix from $2,3002017-02-13 CRITICAL 9.8 CVE-2016-5815 An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 ser… Ion5000 Mitigation only Fix from $2,3002017-02-13 HIGH 8.8 CVE-2016-5809 An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 ser… Ion5000 No fix yet Fix from $1,9502017-02-13 MEDIUM 5.3 CVE-2015-6485 Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3… Telvent Rtu Firmware Mitigation only Fix from $1,6002016-03-12 HIGH 10.0 CVE-2015-7937EPSS 7% Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to exec… Bmxnoc0401 Mitigation only Fix from $1,9502015-12-21 HIGH 7.5 CVE-2014-9200EPSS 6% Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modb… Somachine Mitigation only Fix from $1,9502015-02-01 HIGH 10.0 CVE-2014-9190EPSS 6% Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrar… Wonderware Intouch Access Anywhere Server Mitigation only Fix from $1,9502015-01-10 MEDIUM 6.9 CVE-2014-0774 Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLU… Ofs Test Client Tlxcdlfofs33 Mitigation only Fix from $1,6002014-02-28 MEDIUM 5.9 CVE-2014-0759 Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges v… Floating License Manager Mitigation only Fix from $1,6002014-02-28 MEDIUM 5.0 CVE-2013-6143 The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of ser… Telvent Sage 3030 Firmware Mitigation only Fix from $1,6002014-01-31 HIGH 9.3 CVE-2013-2782 Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different cust… Tburjr900 Mitigation only Fix from $1,9502013-08-28