Vendor
Schneider Electric
1,008 known vulnerabilities in products by Schneider Electric, 9 of them actively exploited (CISA KEV).
Key figures
1,008
Vulnerabilities
9
Actively exploited (KEV)
2
Used by ransomware
192
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability In CISA KEVRansomware | 5.5 | |
| Critical | CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability In CISA KEV | 8.1 | |
| Critical | CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2020-11899 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability In CISA KEV | 5.4 | |
| Critical | CVE-2025-50121 | Schneider Electric EcoStruxure™ IT Data Center Expert: OS Command Injection | — | |
| Critical | CVE-2023-5399 | Schneider Electric C-Bus Toolkit: Path Traversal | 9.8 | |
| Critical | CVE-2020-0609 | Microsoft Windows Server: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-0610 | Microsoft Windows Server: Remote Code Execution | 9.8 | |
| Critical | CVE-2021-22707 | Schneider Electric Evlink City Evc1s22p4 Firmware: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2020-11896 | Treck TCP/IP stack IPv6: Remote Code Execution | 10.0 | |
| Critical | CVE-2022-24313 | Schneider Electric Interactive Graphical SCADA System Data Server: Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2019-6814 | Schneider Electric Net5500 Firmware: Improper Authentication | 9.8 | |
| Critical | CVE-2018-7842 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Authentication Bypass | 9.8 | |
| Critical | CVE-2018-7836 | Schneider Electric IIoT Monitor 3.1.38: security vulnerability | 9.8 | |
| Critical | CVE-2018-7846 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: security vulnerability | 9.8 | |
| Critical | CVE-2021-22802 | Schneider Electric Interactive Graphical SCADA System Data Collector: Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2020-8597 | Point-to-point Protocol: Buffer Overflow | 9.8 | |
| High | CVE-2022-34753 | Schneider Electric SpaceLogic C-Bus Home Controller: OS Command Injection | 8.8 | |
| Critical | CVE-2022-22806 | Schneider Electric SmartConnect: Authentication Bypass by Capture-replay | 9.8 | |
| Critical | CVE-2017-5178 | Schneider Electric Tableau Server: security vulnerability | 9.8 |