Schneider Electric Schwachstellen

Zeitverlauf

Typ

Produkt

Schneider Electric Modicon M34059
Schneider Electric Modicon Quantum45
Schneider Electric Modicon Premium41
Schneider Electric Modicon M58041
Schneider Electric U.motion Builder26

Massnahmen

Official Fix329
Temporary Fix0
Workaround17
Unavailable3
Not Defined312

Ausnutzbarkeit

High2
Functional0
Proof-of-Concept11
Unproven2
Not Defined646

Zugriffsart

Not Defined0
Physical7
Local79
Adjacent102
Network473

Authentisierung

Not Defined0
High28
Low233
None400

Benutzeraktivität

Not Defined0
Required127
None534

C3BM Index

CVSSv3 Base

≤10
≤20
≤36
≤453
≤558
≤6117
≤7192
≤8124
≤976
≤1035

CVSSv3 Temp

≤10
≤20
≤311
≤448
≤561
≤6149
≤7182
≤8104
≤971
≤1035

VulDB

≤10
≤20
≤318
≤480
≤584
≤6167
≤7110
≤8144
≤924
≤1034

NVD

≤10
≤20
≤30
≤42
≤514
≤632
≤735
≤8138
≤946
≤1076

CNA

≤10
≤20
≤30
≤41
≤54
≤617
≤725
≤841
≤925
≤1022

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k140
<2k294
<5k226
<10k0
<25k1
<50k0
<100k0
≥100k0

Exploit heute

<1k632
<2k26
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (332): 140CRA312xxx (1), 66074 MGE Network Management Card (4), AP7xxxx (1), AP8xxx (1), APC Easy UPS Online (7), APDU9xxx (1), ATV IMC Drive Controller (1), AccuSine PCS+ (1), AccuSine PCSn (1), AccuSine PFV+ (1), Accutech Manager (2), Acti9 PowerTag Link C (1), Ampla MES (2), Andover Continuum (4), BMX-NOR-0200H (1), BMXNOR0200 (6), BMXNOR0200H Ethernet-Serial RTU Module (1), BMXNOR0200H Ethernet Serial RTU Module (2), BMxCRA312xx (1), C-Bus Network Automation Controller (2), C-Bus Toolkit (10), C-Gate Server (1), CanBRASS (1), CitectSCADA (4), Citectscada Reports (4), ClearSCADA (9), Clipsal C-Bus Network Automation Controller (2), Clipsal Wiser for C-Bus Automation Controller (2), Conext ComBox (4), Conext ComBox 865-1058 (1), Conext Gateway (1), ConneXium (1), ConneXium Network Manager (1), ConneXium Tofino Firewall (4), ConneXium Tofino OPCLSM (2), Cove (1), Custom Reports (8), Cybersecurity Admin Expert (1), Data Center Expert (4), Device Type Manager (1), EER21000 (6), EER21001 (6), ETG3000 (2), EVlink City (14), EVlink City EVC1S7P4 (7), EVlink City EVC1S22P4 (7), EVlink Parking (14), EVlink Parking EVF2 (7), EVlink Parking EVP2PE (7), EVlink Parking EVW2 (7), EVlink Smart Wallbox (14), EVlink Smart Wallbox EVB1A (7), Easergy Builder Installer (1), Easergy P3 (1), Easergy P5 (5), Easergy P40 (1), Easergy Studio (1), Easergy T200 (4), Easergy T200E (3), Easergy T200H (3), Easergy T200I (3), Easergy T200P (3), Easergy T200S (3), Easergy T300 (18), Easergy T300 RTU (1), Easy UPS Online Monitoring Software (1), EcoStruxure (3), EcoStruxure Building Operation Enterprise Server Installer (1), EcoStruxure Building Operation WebReports (5), EcoStruxure Building Operation WebStation (1), EcoStruxure Control Expert (23), EcoStruxure Cybersecurity Admin Expert (1), EcoStruxure EV Charging Expert (2), EcoStruxure Enterprise Central Installer (1), EcoStruxure Foxboro DCS Control Core Services (2), EcoStruxure Geo SCADA Expert (7), EcoStruxure Geo SCADA Expert 2019 (4), EcoStruxure Geo SCADA Expert 2020 (4), EcoStruxure Geo SCADA Expert 2021 (3), EcoStruxure Hybrid DCS (1), EcoStruxure IT Gateway (2), EcoStruxure Machine Expert (3), EcoStruxure OPC UA Server Expert (1), EcoStruxure Operator Terminal Expert (13), EcoStruxure Power Build Rapsody (2), EcoStruxure Power Commission (4), EcoStruxure Power Design (1), EcoStruxure Power Monitoring Expert (11), EcoStruxure Power Operation (2), EcoStruxure Power SCADA Operation (2), EcoStruxure Pro-face BLUE (6), EcoStruxure Process Expert (13), Enerlin'X Com'X 510 (1), Evlink Charging Station (1), FlexNet Publisher (1), Floating License Manager (1), GP-Pro EX (1), GP-Pro EX WinGP (1), GUIcon (6), Galaxy VL (1), Galaxy VS (1), Geo SCADA Mobile (1), HMI Panel HMIGTO (1), HMI Panel HMIGTU (1), HMI Panel HMIGTUX (1), HMI Panel HMIGXO (1), HMI Panel HMIGXU (1), HMI Panel HMISCU (1), HMI Panel HMISTO (1), HMI Panel HMISTU (1), HMI Panel XBTGH (1), HMI Panel XBTGT (2), Harmony (1), Harmony Control Relay RMNF22TB30 (1), Harmony Timer Relay RENF22R2MMW (1), IGSS Dashboard (9), IGSS Data Server (18), IGSS Definition (22), IGSS Mobile Application (2), IGSS Update Service (1), IMT25 Magnetic Flow DTM (1), ION73XX (2), ION75XX (2), ION76XX (2), ION8650 (4), ION8800 (4), IOS Smart Meter (3), InTouch Machine Edition (2), InduSoft Web Studio (10), InsightFacility (1), InsightHome (1), Interactive Graphical SCADA System (7), Interactive Graphical SCADA System Data Collector (6), Interactive Graphical SCADA System Data Server (8), Kerweb (1), LANDAC II-2 (1), Legacy Modicon Premium (1), Legacy Modicon Quantum (3), Legacy Offers Modicon Quantum (1), Magelis (2), Magelis XBT HMI (1), Magelis iPC (1), Merten KNX Device (1), MiCOM Px4x (1), MiCOM S1 Studio (1), Modbus Serial Driver (2), Modicon 140CRA (5), Modicon BMENOC 0311 (3), Modicon BMENOC 0321 (3), Modicon BMXNOC0401 (2), Modicon BMXNOE0100 (2), Modicon BMXNOE0110 (2), Modicon BMXNOE0110H (2), Modicon BMXNOR0200H (2), Modicon BMXP342020 (2), Modicon BMXP342020H (2), Modicon BMXP342030 (2), Modicon BMXP342030H (2), Modicon BMXP3420302 (2), Modicon BMXP3420302H (2), Modicon BMxCRA (5), Modicon LMC058 (1), Modicon LMC078 (1), Modicon M100 (1), Modicon M200 (1), Modicon M218 Logic Controller (3), Modicon M221 (12), Modicon M241 (5), Modicon M251 (5), Modicon M258 (2), Modicon M340 (59), Modicon M340 BMX (1), Modicon M340 CPU (16), Modicon M340 Communication Module (1), Modicon M340 X80 Ethernet Communication Module (4), Modicon M580 (41), Modicon M580 CPU (11), Modicon M580 CPU Safety (4), Modicon MC80 (7), Modicon Managed Switch MCSESM (1), Modicon Managed Switch MCSESP (1), Modicon Modbus Protocol (1), Modicon Momentum Ethernet CPU (4), Modicon Momentum MDI (2), Modicon Momentum Unity M1E Processor (1), Modicon PLC (3), Modicon PLC Ethernet module (1), Modicon Premium (41), Modicon Premium (2), Modicon Premium CPU (5), Modicon Premium Communication Module (4), ModiconPremium Legacy (1), Modicon Premium Legacy (3), Modicon Premium Processor (3), Modicon Quantum (45), Modicon Quantum 140 NOE771x1 (1), Modicon Quantum CPU (5), Modicon Quantum Communication Module (4), Modicon Quantum PLC (7), Modicon Quantum Plc (2), Modicon Quantum Processor (3), Modicon TM221CE16R (2), Modicon X80 BMXNOR0200H RTU (1), NMC2 AOS (6), NMC3 AOS (6), NetBotz (3), OFS (1), OPC Factory Server (2), OPC UA Modicon Communication Module (7), Opc Factory Server Tlxcdstofs (1), PLC Simulator for EcoStruxure (3), PM5XXX (2), PacDrive Eco (1), PacDrive Pro (1), PacDrive Pro2 (1), Pelco DS-NV (1), Pelco Digital Sentry Video Management System (1), Pelco Endura NET55XX Encoder (1), Pelco Sarix Professional (15), Pelco VideoXpert Enterprise (3), PowerChute Business Edition (1), PowerLogic (2), PowerLogic EGX100 (6), PowerLogic EGX300 (6), PowerLogic HDPM6000 (1), PowerLogic ION73xx (1), PowerLogic ION83xx (4), PowerLogic ION84xx (4), PowerLogic ION85xx (4), PowerLogic ION7400 (4), PowerLogic ION7650 (4), PowerLogic ION7700 (1), PowerLogic ION8600 (4), PowerLogic ION8650 (4), PowerLogic ION8800 (4), PowerLogic ION9000 (4), PowerLogic PM8ECC (4), PowerLogic PM55xx (2), PowerLogic PM800 (3), PowerLogic PM5560 (1), PowerLogic PM8000 (1), Power Monitoring Expert (1), PowerSCADA Anywhere (5), Power SCADA Operation (1), PowerTag (1), Premium CPU (1), Pro-Face GP Pro EX (1), Pro-face BLUE (1), ProClima (7), Programmable Logic Controller (1), Quantum Ethernet Module 140noe77100 (2), Ritto Wiser Door (1), SCADA Expert ClearSCADA (4), SCADAPack 7x Remote Connect (4), SCADAPack 312E (1), SCADAPack 313E (1), SCADAPack 314E (1), SCADAPack 330E (1), SCADAPack 333E (1), SCADAPack 334E (1), SCADAPack 337E (1), SCADAPack 350E (1), SCADAPack 357E (1), SCADAPack RemoteConnect for x70 (6), SCADAPack Workbench (1), SCADAPack x70 Security Administrator (1), SCADA Software (1), SCL (3), SFAPV9601 APC Easy UPS On-Line Software (2), SMC (2), SMT (3), SMTL (2), SMX (3), SRT (1), SmartStruxure (3), Smartlink (1), SoMachine (1), SoMachine Basic (5), SoMachine HVAC (5), SoMove (1), SoMove Software (1), SoSafe Configurable (1), Software Update (3), Software Update SUT Service (1), Software Update Utility (1), SpaceLogic C-Bus Application Controller (2), SpaceLogic C-Bus Home Controller (1), SpaceLogic C-Bus Network Automation Controller (2), Stb Dio Ethernet Module Stbnic2212 (1), StruxureOn Gateway (1), StruxureWare Building Expert MPM (1), StruxureWare Data Center (4), StruxureWare Data Center Expert (11), Struxureware Building Operations Automation Server (1), TCM (1), Tableau Desktop (1), Tableau Server (1), Tburjr900 (1), Telemecanique Driver Pack (1), Telvent Sage (1), Telvent Sage 3030 (1), Touch Panel (2), TriStation (2), TriStation 1131 (1), Triconex Model 3009 MP (5), Triconex TCM 4351B (1), Triconex Tricon MP 3008 (2), Trio E-Series Ethernet Data Radio (2), Trio J-Series Ethernet Data Radio (2), Trio Q-Series Ethernet Data Radio (2), U.motion Builder (26), U.motion Server (8), Unity Pro (4), VAMPSET (3), Vijeo Citect (1), Vijeo Designer (3), Vijeo Designer Basic (3), Wiser Series Gateway (1), Wiser Smart (7), Wiser for C-Bus Automation Controller (2), Wiser for KNX (8), Wonderware ArchestrA Logger (3), Wonderware Historian (1), Wonderware Historian Client (1), Wonderware InTouch (3), Wonderware InTouch Access Anywhere Server (1), Wonderware System Platform (1), X80 Advanced RTU Communication Module (7), ZelioSoft2 (1), fellerLYnk (5), homeLYnk (10), spaceLYnk (15)

Link to Vendor Website: https://www.schneider-electric.com/

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
18.03.20246.26.1Schneider Electric Easergy T200 Cross Site ScriptingSCADA SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-2050
18.03.20246.46.3Schneider Electric Easergy T200 erweiterte RechteSCADA SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-2052
18.03.20246.76.7Schneider Electric Easergy T200 Information DisclosureSCADA SoftwareNot DefinedOfficial Fix0.000430.08CVE-2024-2051
12.03.20248.38.3Schneider Electric EcoStruxure Power Design Project File erweiterte RechteSCADA SoftwareNot DefinedNot Defined0.000650.00CVE-2024-2229
21.02.20247.06.7Schneider Electric EcoStruxure IT Gateway schwache AuthentisierungSCADA SoftwareNot DefinedOfficial Fix0.000000.00CVE-2024-0865
21.02.20247.87.5Schneider Electric EcoStruxure IT Gateway schwache AuthentisierungSCADA SoftwareNot DefinedOfficial Fix0.000000.04CVE-2024-0865
14.02.20248.88.6Schneider Electric Harmony Control Relay RMNF22TB30 NFC schwache AuthentisierungSCADA SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-0568
14.02.20246.56.4Schneider Electric EcoStruxure Control Expert Project File schwache AuthentisierungSCADA SoftwareNot DefinedOfficial Fix0.000430.02CVE-2023-6409
14.02.20246.26.1Schneider Electric EcoStruxure Control Expert Project File Information DisclosureSCADA SoftwareNot DefinedOfficial Fix0.000430.09CVE-2023-27975
14.02.20248.17.9Schneider Electric Modicon M340 CPU erweiterte RechteSCADA SoftwareNot DefinedOfficial Fix0.000430.04CVE-2023-6408
09.01.20247.87.6Schneider Electric Easergy Studio erweiterte RechteSCADA SoftwareNot DefinedOfficial Fix0.000460.04CVE-2023-7032
14.12.20236.26.1Schneider Electric Trio Q-Series Ethernet Data Radio Information DisclosureSCADA SoftwareNot DefinedOfficial Fix0.000460.02CVE-2023-5630
14.12.20236.26.1Schneider Electric Trio Q-Series Ethernet Data Radio RedirectSCADA SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-5629
12.12.20235.95.8Schneider Electric Easy UPS Online Monitoring Software Directory TraversalSCADA SoftwareNot DefinedOfficial Fix0.000930.02CVE-2023-6407
15.11.20235.35.2Schneider Electric Galaxy VS/Galaxy VL Network Management Card Directory TraversalSCADA SoftwareNot DefinedOfficial Fix0.000470.00CVE-2023-6032
15.11.20236.26.1Schneider Electric EcoStruxure Power Monitoring Expert RedirectSCADA SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-5986
15.11.20235.25.1Schneider Electric EcoStruxure Power Monitoring Expert Cross Site ScriptingSCADA SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-5987
15.11.20233.63.5Schneider Electric ION8650/ION8800 Cross Site ScriptingSCADA SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-5985
15.11.20236.46.3Schneider Electric ION8650/ION8800 Firmware Update Information DisclosureSCADA SoftwareNot DefinedOfficial Fix0.000460.02CVE-2023-5984
05.10.20239.89.6Schneider Electric C-Bus Toolkit Directory TraversalSCADA SoftwareNot DefinedOfficial Fix0.001760.03CVE-2023-5399
05.10.20239.89.6Schneider Electric EcoStruxure Power Monitoring Expert Packet erweiterte RechteSCADA SoftwareNot DefinedOfficial Fix0.001570.00CVE-2023-5391
04.10.20238.88.6Schneider Electric C-Bus Toolkit erweiterte RechteSCADA SoftwareNot DefinedOfficial Fix0.001960.04CVE-2023-5402
14.09.20237.87.6Schneider Electric IGSS Update Service Update Source schwache AuthentisierungSCADA SoftwareNot DefinedOfficial Fix0.000450.02CVE-2023-4516
09.08.20235.35.2Schneider Electric GP-Pro EX WinGP Log File PufferüberlaufSCADA SoftwareNot DefinedOfficial Fix0.000440.00CVE-2023-3953
12.07.20237.87.6Schneider Electric Accutech Manager PufferüberlaufSCADA SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-29414

636 weitere Einträge werden nicht mehr angezeigt

Want to stay up to date on a daily basis?

Enable the mail alert feature now!