CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on March 18, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-077-01 Schneider Electric EcoStruxure Power Automation System User Interface EPAS-UI...

Schneider Electric WebHMI 安全漏洞

Schneider Electric WebHMI is a human-machine interface software from Schneider Electric France. A security vulnerability exists in WebHMI v4.1.0.0 and earlier versions that originates from the use of insecure default values during resource initialization, which could allow an attacker to execute...

Schneider Electric EcoStruxure Panel Server 日志信息泄露漏洞

The Schneider Electric EcoStruxure Panel Server is an IoT gateway for data collection and upload from Schneider Electric France. A log information disclosure vulnerability exists in Schneider Electric EcoStruxure Panel Server v2.0 and prior versions, which originates from inserting sensitive...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on March 11, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-070-01 Schneider Electric Uni-Telway Driver ICSA-25-070-02 Optigo Networks Visual BACnet...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on March 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-065-01 Hitachi Energy PCU400 ICSA-25-065-02 Hitachi Energy Relion 670/650/SAM600-IO...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on February 27, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-058-01 Schneider Electric Communication Modules for Modicon M580 and Quantum...

Schneider Electric EcoStruxure Geo SCADA Expert Multiple Vulnerabilities (SEVD-2023-010-02)

Binary data schneiderelectricecostruxuregeoscadaexpertsevd-2023-010-02.nbin...

Schneider Electric EcoStruxure Geo SCADA Expert Web Server Detection

Binary data schneiderelectricecostruxuregeoscadaexpertwebdetect.nbin...

Schneider Electric Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC Incorrect Calculation of Buffer Size (CVE-2024-11425)

CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...

Schneider Electric Power Logic Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2024-10498)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow an unauthorized attacker to modify configuration values outside of the normal range when the attacker sends specific Modbus write packets to the device which could result in...

Schneider Electric Power Logic Authorization Bypass Through User-Controlled Key (CVE-2024-10497)

CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges Elevation of Privileges when the attacker sends modified HTTPS requests to the device. This plugin only works with...

Schneider Electric EcoStruxure Control Expert、EcoStruxure Process Expert和OPC Factory Server 输入验证错误漏洞

Schneider Electric EcoStruxure Control Expert formerly known as Unity Pro, among others, is a product of Schneider Electric, France.Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller products. Schneider Electric EcoStruxure...

Schneider Electric ASCO 5310和ASCO 5350 代码问题漏洞

The Schneider Electric ASCO 5310 and Schneider Electric ASCO 5350 are both single-channel remote alarms from Schneider Electric France. A code issue vulnerability exists in the Schneider Electric ASCO 5310 and ASCO 5350 that stems from the inclusion of a dangerous type of file unrestricted upload...

Schneider Electric ASCO 5310 安全漏洞

The Schneider Electric ASCO 5310 is a single-channel remote alarm from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 that stems from the inclusion of an unrestricted or throttled resource allocation vulnerability that could cause communication to...

Schneider Electric ASCO 5310和ASCO 5350 安全漏洞

The Schneider Electric ASCO 5310 is a single-channel remote alarm from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 and ASCO 5350, which stems from the inclusion of a sensitive information plaintext transfer vulnerability that could lead to data...

Schneider Electric Enerlin 输入验证错误漏洞

The Schneider Electric Enerlin is a series of communication devices from Schneider Electric, a French company. An input validation error vulnerability exists in the Schneider Electric Enerlin, which stems from the inclusion of an improper input validation vulnerability that could result in a deni...

PT-2025-6829 · Schneider Electric · Asco 5310 Single-Channel Remote Annunciator

Name of the Vulnerable Software and Affected Versions: Schneider Electric - ASCO 5310 Single-Channel Remote Annunciator versions all Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which could render the device inoperable when a malicious file is downloade...

Schneider Electric ASCO 5310和ASCO 5350 安全漏洞

The Schneider Electric ASCO 5310 and Schneider Electric ASCO 5350 are both single-channel remote alarms from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 and ASCO 5350 that stems from the inclusion of a code download vulnerability without integrit...

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems lies in the fact that operations may occur outside the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-037-01 Schneider Electric EcoStruxure Power Monitoring Expert PME ICSA-25-037-02...