en
A multinational provider of energy management and automation solutions, focused on data center monitoring, power management, and IT infrastructure with ecosystem software like EcoStruxure IT. It serves enterprise and service-provider customers worldwide.
Severity across 106 analyzed records
As of 09/11/2026, Schneider Electric recorded 17 security vulnerabilities in the last 90 days across 21 products, including 12 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, PowerLogic™ P7 had the most security vulnerabilities in the Schneider Electric ecosystem, with 3 vulnerabilities—approximately 17.65% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-77120CVE-2026-77120 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerLogic T300 | Published09/09/2026 | SeverityHigh |
CVE-2026-19233CVE-2026-19233 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) | Published09/09/2026 | SeverityHigh |
CVE-2026-8044CVE-2026-8044 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) | Published09/09/2026 | SeverityHigh |
CVE-2026-13348CVE-2026-13348 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published09/01/2026 | SeverityMedium |
CVE-2026-13337CVE-2026-13337 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNetBotz 5 - 750/755 | Published09/01/2026 | SeverityMedium |
CVE-2026-13336CVE-2026-13336 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNetBotz 5 - 750/755 | Published09/01/2026 | SeverityHigh |
CVE-2024-10085CVE-2024-10085 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ OPC UA Server Expert | Published09/01/2026 | SeverityHigh |
CVE-2026-12927CVE-2026-12927 | Exploitation statusNot known exploited | FixNot confirmed | Affected productIGSS Definition (Def.exe) | Published07/29/2026 | SeverityHigh |
CVE-2026-0667CVE-2026-0667 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSCADAPack 47x | Published07/29/2026 | SeverityCritical |
CVE-2026-14354CVE-2026-14354 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Cybersecurity Admin Expert | Published07/29/2026 | SeverityHigh |
CVE-2026-9718CVE-2026-9718 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerLogic™ P7 | Published06/25/2026 | SeverityMedium |
CVE-2026-9717CVE-2026-9717 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerLogic™ P7 | Published06/25/2026 | SeverityHigh |
CVE-2026-9716CVE-2026-9716 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerLogic™ P7 | Published06/25/2026 | SeverityHigh |
CVE-2026-9651CVE-2026-9651 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller | Published06/25/2026 | SeverityMedium |
CVE-2026-9650CVE-2026-9650 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller | Published06/25/2026 | SeverityHigh |
CVE-2026-8045CVE-2026-8045 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ IT Data Center Expert | Published06/09/2026 | SeverityHigh |
CVE-2026-6332Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcostruxure™ Machine Expert HVAC | Published05/14/2026 | SeverityMedium |
CVE-2026-6866Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Panel Server | Published05/12/2026 | SeverityHigh |
CVE-2026-6865Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products | Exploitation statusNot known exploited | FixNot confirmed | Affected productEasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller | Published05/12/2026 | SeverityHigh |
CVE-2026-4827Insufficient Entropy vulnerability on Multiple Products | Exploitation statusNot known exploited | FixNot confirmed | Affected productEasergy MiCOM C264 | Published05/12/2026 | SeverityHigh |
CVE-2026-2401CVE-2026-2401 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityLow |
CVE-2026-2400CVE-2026-2400 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityMedium |
CVE-2026-2403CVE-2026-2403 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityMedium |
CVE-2026-2405CVE-2026-2405 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityMedium |
CVE-2026-2402CVE-2026-2402 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityMedium |
CVE-2026-2404CVE-2026-2404 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityMedium |
CVE-2026-2399CVE-2026-2399 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published04/14/2026 | SeverityMedium |
CVE-2026-4832CVE-2026-4832 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEasergy MiCOM P14x | Published04/14/2026 | SeverityMedium |
CVE-2026-2273CVE-2026-2273 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Automation Expert | Published03/10/2026 | SeverityHigh |
CVE-2026-1286CVE-2026-1286 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Foxboro DCS | Published03/10/2026 | SeverityHigh |
CVE-2025-13902CVE-2025-13902 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published03/10/2026 | SeverityMedium |
CVE-2025-13901CVE-2025-13901 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon M241/M251 | Published03/10/2026 | SeverityMedium |
CVE-2025-11739CVE-2025-11739 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Monitoring Expert (PME) | Published03/10/2026 | SeverityHigh |
CVE-2025-13957CVE-2025-13957 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) | Published03/10/2026 | SeverityHigh |
CVE-2026-1226CVE-2026-1226 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Building Operation Workstation | Published02/11/2026 | SeverityHigh |
CVE-2026-1227CVE-2026-1227 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Building Operation Workstation | Published02/11/2026 | SeverityHigh |
CVE-2025-13905CVE-2025-13905 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Process Expert | Published01/29/2026 | SeverityHigh |
CVE-2025-13845CVE-2025-13845 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Power Build Rapsody | Published01/15/2026 | SeverityHigh |
CVE-2025-13844CVE-2025-13844 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Power Build Rapsody | Published01/15/2026 | SeverityHigh |
CVE-2025-11567CVE-2025-11567 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published11/12/2025 | SeverityHigh |
CVE-2025-11566CVE-2025-11566 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published11/12/2025 | SeverityMedium |
CVE-2025-11565CVE-2025-11565 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerChute™ Serial Shutdown | Published11/12/2025 | SeverityHigh |
CVE-2025-9997CVE-2025-9997 | Exploitation statusNot known exploited | FixYes | Affected productSaitel DR RTU | Published09/09/2025 | SeverityMedium |
CVE-2025-9996CVE-2025-9996 | Exploitation statusNot known exploited | FixYes | Affected productSaitel DR RTU | Published09/09/2025 | SeverityMedium |
CVE-2025-7746CVE-2025-7746 | Exploitation statusNot known exploited | FixYes | Affected productATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives | Published09/09/2025 | SeverityMedium |
CVE-2025-8448CVE-2025-8448 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure Enterprise Server | Published08/20/2025 | SeverityLow |
CVE-2025-8449CVE-2025-8449 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure Enterprise Server | Published08/20/2025 | SeverityMedium |
CVE-2025-54927CVE-2025-54927 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Monitoring Expert (PME) | Published08/20/2025 | SeverityMedium |
CVE-2025-54926CVE-2025-54926 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Monitoring Expert (PME) | Published08/20/2025 | SeverityHigh |
CVE-2025-54925CVE-2025-54925 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Monitoring Expert (PME) | Published08/20/2025 | SeverityHigh |
CVE-2025-54924CVE-2025-54924 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Monitoring Expert (PME) | Published08/20/2025 | SeverityHigh |
CVE-2025-54923CVE-2025-54923 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Monitoring Expert (PME) | Published08/20/2025 | SeverityHigh |
CVE-2025-8453CVE-2025-8453 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSaitel DR RTU | Published08/20/2025 | SeverityHigh |
CVE-2025-5296CVE-2025-5296 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSESU | Published08/18/2025 | SeverityHigh |
CVE-2025-6625CVE-2025-6625 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon M340 | Published08/18/2025 | SeverityHigh |
CVE-2025-6788CVE-2025-6788 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ Power Monitoring Expert | Published07/11/2025 | SeverityMedium |
CVE-2025-50124CVE-2025-50124 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ IT Data Center Expert | Published07/11/2025 | SeverityHigh |
CVE-2025-50125CVE-2025-50125 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ IT Data Center Expert | Published07/11/2025 | SeverityMedium |
CVE-2025-50123CVE-2025-50123 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ IT Data Center Expert | Published07/11/2025 | SeverityHigh |
CVE-2025-50122CVE-2025-50122 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ IT Data Center Expert | Published07/11/2025 | SeverityHigh |
CVE-2025-50121CVE-2025-50121 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ IT Data Center Expert | Published07/11/2025 | SeverityCritical |
CVE-2025-6438CVE-2025-6438 | Exploitation statusNot known exploited | FixYes | Affected productEcoStruxure™ IT Data Center Expert | Published07/11/2025 | SeverityMedium |
CVE-2025-3117CVE-2025-3117 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published06/10/2025 | SeverityMedium |
CVE-2025-3116CVE-2025-3116 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published06/10/2025 | SeverityHigh |
CVE-2025-3905CVE-2025-3905 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published06/10/2025 | SeverityMedium |
CVE-2025-3112CVE-2025-3112 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published06/10/2025 | SeverityHigh |
CVE-2025-3899CVE-2025-3899 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published06/10/2025 | SeverityMedium |
CVE-2025-3898CVE-2025-3898 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published06/10/2025 | SeverityHigh |
CVE-2025-5743CVE-2025-5743 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEVLink WallBox | Published06/10/2025 | SeverityHigh |
CVE-2025-5742CVE-2025-5742 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEVLink WallBox | Published06/10/2025 | SeverityMedium |
CVE-2025-5741CVE-2025-5741 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEVLink WallBox | Published06/10/2025 | SeverityMedium |
CVE-2025-5740CVE-2025-5740 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEVLink WallBox | Published06/10/2025 | SeverityHigh |
CVE-2025-2875CVE-2025-2875 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon Controllers M241 / M251 | Published05/14/2025 | SeverityHigh |
CVE-2025-3916CVE-2025-3916 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Build Rapsody software | Published05/13/2025 | SeverityMedium |
CVE-2025-2442CVE-2025-2442 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTrio Q Licensed Data Radio | Published04/09/2025 | SeverityMedium |
CVE-2025-2441CVE-2025-2441 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTrio Q Licensed Data Radio | Published04/09/2025 | SeverityMedium |
CVE-2025-2440CVE-2025-2440 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTrio Q Licensed Data Radio | Published04/09/2025 | SeverityMedium |
CVE-2025-2223CVE-2025-2223 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConneXium Network Manager | Published04/09/2025 | SeverityHigh |
CVE-2025-2222CVE-2025-2222 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConneXium Network Manager | Published04/09/2025 | SeverityHigh |
CVE-2025-1960CVE-2025-1960 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWebHMI – Deployed with EcoStruxure Power Automation System | Published03/12/2025 | SeverityCritical |
CVE-2025-0813CVE-2025-0813 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions | Published03/12/2025 | SeverityHigh |
CVE-2025-2002CVE-2025-2002 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Panel Server | Published03/12/2025 | SeverityMedium |
CVE-2025-0814CVE-2025-0814 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEnerlin’X IFE interface (LV434001) | Published02/13/2025 | SeverityMedium |
CVE-2025-0815CVE-2025-0815 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEnerlin’X IFE interface (LV434001) | Published02/13/2025 | SeverityHigh |
CVE-2025-0816CVE-2025-0816 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEnerlin’X IFE interface (LV434001) | Published02/13/2025 | SeverityHigh |
CVE-2025-0327CVE-2025-0327 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Process Expert | Published02/13/2025 | SeverityHigh |
CVE-2025-1070CVE-2025-1070 | Exploitation statusNot known exploited | FixNot confirmed | Affected productASCO 5310 Single-Channel Remote Annunciator | Published02/13/2025 | SeverityHigh |
CVE-2025-1060CVE-2025-1060 | Exploitation statusNot known exploited | FixNot confirmed | Affected productASCO 5310 Single-Channel Remote Annunciator | Published02/13/2025 | SeverityHigh |
CVE-2025-1059CVE-2025-1059 | Exploitation statusNot known exploited | FixNot confirmed | Affected productASCO 5310 Single-Channel Remote Annunciator | Published02/13/2025 | SeverityHigh |
CVE-2025-1058CVE-2025-1058 | Exploitation statusNot known exploited | FixNot confirmed | Affected productASCO 5310 Single-Channel Remote Annunciator | Published02/13/2025 | SeverityHigh |
CVE-2024-10083CVE-2024-10083 | Exploitation statusNot known exploited | FixNot confirmed | Affected productUni-Telway driver | Published02/13/2025 | SeverityMedium |
CVE-2024-8401CVE-2024-8401 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure Power Monitoring Expert (PME) 2021 | Published01/28/2025 | SeverityMedium |
CVE-2024-10498CVE-2024-10498 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerLogic HDPM6000 | Published01/17/2025 | SeverityMedium |
CVE-2024-10497CVE-2024-10497 | Exploitation statusNot known exploited | FixNot confirmed | Affected productPowerLogic HDPM6000 | Published01/17/2025 | SeverityHigh |
CVE-2024-12703CVE-2024-12703 | Exploitation statusNot known exploited | FixNot confirmed | Affected productRemoteConnect and SCADAPack x70 Utilities | Published01/17/2025 | SeverityHigh |
CVE-2024-12142CVE-2024-12142 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon M340 processors (part numbers BMXP34*) | Published01/17/2025 | SeverityHigh |
CVE-2024-12476CVE-2024-12476 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWeb Designer for BMXNOR0200H | Published01/17/2025 | SeverityHigh |
CVE-2024-12399CVE-2024-12399 | Exploitation statusNot known exploited | FixYes | Affected productPro-face GP-Pro EX | Published01/17/2025 | SeverityMedium |
CVE-2024-11425CVE-2024-11425 | Exploitation statusNot known exploited | FixNot confirmed | Affected productModicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) | Published01/17/2025 | SeverityHigh |
CVE-2024-11139CVE-2024-11139 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEcoStruxure™ Power Build Rapsody | Published01/17/2025 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
.svg){kind=icon}
.svg){kind=icon}
%20Remote%20Terminal%20Unit%20%26%20Controller.svg){kind=icon}
.svg){kind=icon}
%20-%20Secured%20Versions.svg){kind=icon}
.svg){kind=icon}
%202021.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
%20Advanced%20Reporting%20and%20Dashboards%20Module.svg){kind=icon}