4537 matches found
The vulnerability of microprogramming software for logic controllers used in building and facility management systems from Schneider Electric—such as spaceLYnk, Wiser for KNX (formerly homeLYnk), and FellerLYnk—is related to the lack of protective measures for the website structure. This allows attackers to execute arbitrary code.
The vulnerability of microprogramming software for logic controllers used in building and facility management by Schneider Electric, such as spaceLYnk and Wiser for KNX formerly homeLYnk and fellerLYnk, is related to the lack of measures taken to protect the website structure. Exploiting this...
Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products
Three security vulnerabilities have been disclosed in operational technology OT products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL, which now comprises a total of 61 issues spanning 13 different vendors...
Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products
Three security vulnerabilities have been disclosed in operational technology OT products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL , which now comprises a total of 61 issues spanning 13 different vendors...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
The Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric, France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Control Core Services, which stems from incorrect...
Schneider Electric EcoStruxure Foxboro DCS Buffer Overflow Vulnerability
The Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric, France. A buffer overflow vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Control Core Services, which originates from a boundary error wh...
Schneider Electric IGSS DashFiles Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Schneider Electric EcoStruxure Foxboro DCS 缓冲区错误漏洞
The Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric, France. A buffer overflow vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Control Core Services, which originates from a boundary error wh...
Schneider Electric IGSS 代码问题漏洞
Schneider Electric IGSS is a multi-player collaborative application from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric IGSS Dashboard DashBoard.exe v16.0.0.23130 and prior versions, which stems from untrustworthy data deserialization in the Dashboard module,...
PT-2023-3139 · Schneider Electric · Igss
Name of the Vulnerable Software and Affected Versions: Schneider Electric IGSS affected versions not specified Description: A Deserialization of Untrusted Data issue exists in the Dashboard module, potentially leading to remote code execution when an attacker gets the user to open a malicious fil...
The software system of Schneider Electric’s industrial automation solutions, Codesys, has vulnerabilities. These vulnerabilities allow attackers to cause a loss of control and trigger malfunctions during maintenance operations.
The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain control and caus...
Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters Cleartext Transmission of Sensitive Information (CVE-2022-46680)
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic. This plugin only works with Tenable.ot. Please visit...
The vulnerability of the microprogramming software in Schneider Electric Easergy P40 relay protection and control devices allows a intruder to manipulate network traffic.
The vulnerability of microprogrammed software in relay protection and control devices from Schneider Electric’s Easergy P40 lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow a malicious actor to manipulate network traffic remotely...
The vulnerability of the software for configuring Schneider Electric Easergy Builder allows a hacker to execute arbitrary code.
The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to an uncontrolled element in the search process of the installer. Exploiting this vulnerability could allow a perpetrator to perform arbitrary actions during the installation process...
The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers allows a intruder to trigger a service failure.
The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the service operation...
Schneider Electric APC Easy UPS Online Monitoring Software Unauthenticated RMI Calls (CVE-2023-28411)
Binary data schneiderelectricupsmonitoringsoftwareunauthrmi.nbin...
The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers allows a perpetrator to compromise data integrity.
The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers is related to the disclosure of information in the incorrect data field. Exploiting this vulnerability could allow a malicious actor to compromise the...
The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Schneider Electric PowerLogic 安全漏洞
Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. A security vulnerability exists in the Schneider Electric PowerLogic...
The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices allows a intruder to perform unauthorized operations during an authentication process.
The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an intruder to perform unauthorized operations remotely...
Schneider Electric OPC Factory Server XML External Entity Injection Vulnerability
Schneider Electric OPC Factory Server is a software application from the French company Schneider Electric Schneider Electric. An XML external entity injection vulnerability exists in Schneider Electric OPC Factory Server, which stems from an improper restriction on XML external entity references...