schneider-electric

765 tracked vulnerabilities.

CVE-2021-22818 HIGH
EVlink <R8 V3.4.0.2 - Info Disclosure
Jan 28, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-22816 HIGH
Schneider Electric SCADAPack E-Series Firmware < 8.19.1 - Denial of Service via Crafted Modbus Request
Jan 28, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-22815 MEDIUM
AP9630/AP9631/AP9635 - Info Disclosure
Jan 28, 2022
CVSS 5.3
EPSS 0.00
CVE-2021-22814 MEDIUM
Schneider Electric NMC 2 <6.9.8 & NMC 3 <1.4.2.1 - Stored XSS via Malicious File Display
Jan 28, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-22813 MEDIUM
AP9630/AP9630CH/AP9630J/AP9631/AP9631CH/AP9631J/AP9635 - XSS
Jan 28, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-22812 MEDIUM
Schneider Electric Network Management Card 2 <6.9.8 & 3 <1.4.2.1 XSS via Malicious URL
Jan 28, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-22811 MEDIUM
Schneider Electric Network Management Card 2 <6.9.8 & 3 <1.4.2.1 - XSS
Jan 28, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-22810 MEDIUM
AP9630/AP9630CH/AP9630J/AP9631/AP9631CH/AP9631J/AP9635 - XSS
Jan 28, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-22809 MEDIUM
Eurotherm by Schneider Electric GUIcon <2.0 - Info Disclosure
Jan 28, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-22808 HIGH
Eurotherm by Schneider Electric GUIcon <2.0 - Use After Free
Jan 28, 2022
CVSS 7.8
EPSS 0.01
CVE-2021-22807 HIGH
Eurotherm by Schneider Electric GUIcon <2.0 Build 683.003 - RCE
Jan 28, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-22799 LOW
Schneider Electric Software Update <2.5.1 - SSRF
Jan 28, 2022
CVSS 3.8
EPSS 0.00
CVE-2021-22725 HIGH
Schneider Electric EVlink Firmware < 3.4.0.2 - Cross-Site Request Forgery via POST Requests
Jan 28, 2022
CVSS 8.8
EPSS 0.00
CVE-2021-22724 HIGH
Schneider Electric EVlink Firmware < 3.4.0.2 - Cross-Site Request Forgery via POST Requests
Jan 28, 2022
CVSS 8.8
EPSS 0.00
CVE-2021-22793 HIGH
AccuSine PCS+/PFV+ <1.6.7, AccuSine PCSn <2.2.4 - Info Disclosure
Sep 02, 2021
CVSS 7.2
EPSS 0.01
CVE-2021-22792 HIGH
Modicon M340 and M580 - Denial of Service via Crafted Project File
Sep 02, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-22791 MEDIUM
Modicon M580/M340/MC80/Momentum - Denial of Service
Sep 02, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-22790 MEDIUM
Modicon M340/M580/MC80/Momentum/Quantum/Premium - Denial of Service via Crafted Project File
Sep 02, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-22789 MEDIUM
Modicon PLC <all - Memory Corruption
Sep 02, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-22775 HIGH
GP-Pro EX <V4.09.250 - Code Injection
Sep 02, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-22704 CRITICAL
Vijeo Designer < 6.2.11 and < 1.2 and EcoStruxure Machine Expert < 2.0 - Path Traversal via FTP Connection
Sep 02, 2021
CVSS 9.1
EPSS 0.01
CVE-2021-22784 MEDIUM
C-Bus Toolkit <1.15.8 - Auth Bypass
Jul 21, 2021
CVSS 5.7
EPSS 0.01
CVE-2021-22777 HIGH
SoSafe Configurable < 1.8.1 - Remote Code Execution via Malicious Project File
Jul 21, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-22774 HIGH
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - Info...
Jul 21, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-22773 MEDIUM
EVlink City/EVlink Parking/EVlink Smart Wallbox <R8 V3.4.0.1 - Unve...
Jul 21, 2021
CVSS 6.5
EPSS 0.00