apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2018-7848

CVE-2018-7848 المنتجات المتأثرة Schneider Electric Modicon M580 الإصدار 2.90 Schneider Electric Modicon M340 الإصدار 3.10 Schneider Electric Modicon Premium جميع الإصدارات Schneider Electric Modicon Quantum جميع الإصدارات المراجع https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7845

CVE-2018-7845 प्रभावित उत्पाद Schneider Electric Modicon M580 संस्करण 2.80 Schneider Electric Modicon M340 संस्करण 3.01 Schneider Electric Modicon Premium संस्करण 3.20 Schneider Electric Modicon Quantum संस्करण 3.60 संदर्भ https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution

SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remote command execution via improper neutralization of special elements. Remote root exploit can be enabled when the command is compromised, and an attacker can potentially execute malware, obtain sensitive information, modify...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

Schneider Electric U.motion Builder - Remote Code Execution

U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters. id: CVE-2018-7841 info: name: Schneider Electric U.motion Builder - Remote Code Execution author:...

CVE-2018-7842

CVE-2018-7842 Produits concernés Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium Toutes les versions Schneider Electric Modicon Quantum Toutes les versions Références...

CVE-2018-7849

CVE-2018-7849 प्रभावित उत्पाद Schneider Electric Modicon M580 संस्करण 2.90 Schneider Electric Modicon M340 संस्करण 3.10 Schneider Electric Modicon Premium सभी संस्करण Schneider Electric Modicon Quantum सभी संस्करण संदर्भ https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 المنتجات المتأثرة Schneider Electric Modicon M580 الإصدار 2.80 Schneider Electric Modicon M340 الإصدار 3.01 Schneider Electric Modicon Premium الإصدار 3.20 Schneider Electric Modicon Quantum الإصدار 3.60 المراجع https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7854

CVE-2018-7854 प्रभावित उत्पाद Schneider Electric Modicon M580 संस्करण 2.90 Schneider Electric Modicon M340 संस्करण 3.10 संदर्भ https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 उपयोग python CVE-2018-7854.py --host...

CVE-2018-7846

CVE-2018-7846 المنتجات المتأثرة Schneider Electric Modicon M580 الإصدار 2.90 Schneider Electric Modicon M340 الإصدار 3.10 Schneider Electric Modicon Premium جميع الإصدارات Schneider Electric Modicon Quantum جميع الإصدارات المراجع https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

CVE-2026-77120

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apgqf2kdfuep5...

CVE-2026-3869

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 13:45:25+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mv3oc4sdrp2x 2026-09-11 17:20:09+00:00| seen|...

Schneider Electric SCADAPack x70 Products

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

Schneider Electric PowerChute Serial Shutdown

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

Schneider Electric NetBotz 5 750/755

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

Schneider Electric Modicon Controllers M241, M251, M258, and LMC058 Improper Neutralization of Input During Web Page Generation (CVE-2025-13902)

CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause condition where authenticated attackers can have a victim's browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server...

Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials. This plugin only...