XSS Vulnerability in TM241CE24T_U at Schneider Electric (China) Co.

Schneider Electric China Co., Ltd. is a globalized electrical company and a global expert in energy efficiency management and automation. An XSS vulnerability exists in Schneider Electric China TM241CE24TU, which can be exploited by attackers to obtain sensitive information such as user cookies...

The vulnerability in the web interface of microprogramming software for devices that control lighting and energy consumption from a distance—Schneider Electric Sage—allows a perpetrator to trigger a service failure.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage arises from improper verification of the return value of methods or functions. This allows a malicious actor to trigger a service failure.

The vulnerability of the microprogramming software used in devices for remote control of lighting and energy consumption in Schneider Electric’s Sage products is related to improper verification of the return value of certain methods or functions. Exploiting this vulnerability could allow a...

The vulnerability in the web interface of microprogramming software for devices that control lighting and energy consumption of Schneider Electric Sage systems allows a perpetrator to trigger a service failure.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to the copying of buffers without checking the size of input data. Exploiting this vulnerability could allow a malicious acto...

The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage lies in the possibility of writing beyond the buffer in memory, allowing attackers to bypass authentication procedures.

The vulnerability of microprogramming software in Schneider Electric Sage lighting and energy consumption remote control devices is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures by...

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage. This allows a perpetrator to upload arbitrary files and embedded software.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to the default access settings. Exploiting this vulnerability allows a malicious actor to upload arbitrary files and embedded...

The vulnerability in the web interface of microprogramming software for devices for remote control of lighting and energy consumption from Schneider Electric Sage allows a perpetrator to compromise the integrity of protected information and cause service interruptions.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a...

Schneider Electric SpaceLogic AS-P/AS-B Log Message Disclosure Vulnerability

The Schneider Electric SpaceLogic AS-P is an automation server from Schneider Electric France. The Schneider Electric SpaceLogic AS-P/AS-B suffers from a log message disclosure vulnerability that can be exploited by an attacker to cause SNMP credentials to be exposed...

Schneider Electric Modicon M340 Denial of Service Vulnerability

The Schneider Electric Modicon M340 is a mid-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A denial of service vulnerability exists in the Schneider Electric Modicon M340, which can be exploited by an attacker to prevent a use...

Schneider Electric SAGE RTUs Out-of-Bounds Read Vulnerability

Schneider Electric SAGE RTUs are a high-performance device for industrial automation and remote monitoring from Schneider Electric, France. An out-of-bounds read vulnerability exists in the Schneider Electric SAGE RTUs, which can be exploited by an attacker to cause a denial of service in the...

Schneider Electric EVlink Home Smart Security Vulnerability

The Schneider Electric EVlink Home Smart is a smart home electric vehicle charger from Schneider Electric France. A security vulnerability exists in Schneider Electric EVlink Home Smart version v2.0.4.1.2131 and v2.0.3.8.2128, which stems from the presence of a Resource Error Domain vulnerability...

Schneider Electric SAGE RTUs Security Vulnerability

Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from the presence of an unchecked return value, which could result in a denial o...

Schneider Electric SAGE RTUs 缓冲区错误漏洞

Schneider Electric SAGE RTUs are a high-performance device for industrial automation and remote monitoring from Schneider Electric, France. An out-of-bounds read vulnerability exists in the Schneider Electric SAGE RTUs, which can be exploited by an attacker to cause a denial of service in the...

Schneider Electric SAGE RTUs Security Vulnerability

Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from the presence of incorrect default permissions that allow authenticated user...

Schneider Electric SAGE RTUs Path Traversal Vulnerability

The Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A path traversal vulnerability exists in the Schneider Electric SAGE RTUs, which originates from allowing an authenticated user to access the device's web...

Schneider Electric PowerLogic Security Vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, a French company. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. A security vulnerability exists in Schneider Electric...

Schneider Electric SAGE RTUs Buffer Error Vulnerability

Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A buffer error vulnerability exists in the Schneider Electric SAGE RTUs, which stems from an out-of-bounds write vulnerability that could lead to an...

Schneider Electric SAGE RTUs Security Vulnerability

Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from buffer copying without checking the input size, which could allow a user wi...

Schneider Electric Easergy Studio Code Issue Vulnerability

Schneider Electric Easergy Studio is an IED support software for setup and configuration from Schneider Electric France. A code issue vulnerability exists in Schneider Electric Easergy Studio v9.3.3 and prior versions, which stems from an unquoted search path or element vulnerability that could...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on June 11, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-163-01 Rockwell Automation ControlLogix, GuardLogix, and CompactLogix ICSA-24-163-02 AVEV...