Known Vulnerabilities for products from Schneider-electric
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Schneider-electric".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Schneider-electric can be found at device.report : Schneider-electric
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-9718 json | CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service co... | Not Provided | 2026-06-25 | 2026-07-01 |
| CVE-2026-9717 json | CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allo... | Not Provided | 2026-06-25 | 2026-07-01 |
| CVE-2026-9716 json | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’... | Not Provided | 2026-06-25 | 2026-07-01 |
| CVE-2026-8045 json | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of... | Not Provided | 2026-06-09 | 2026-06-23 |
| CVE-2026-6866 json | CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure ... | Not Provided | 2026-05-12 | 2026-06-24 |
| CVE-2026-6332 json | CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive infor... | Not Provided | 2026-05-14 | 2026-05-27 |
| CVE-2026-2405 json | CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation a... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2404 json | CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an at... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2403 json | CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncati... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2402 json | CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain a... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2401 json | CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to b... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2400 json | CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user cr... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2399 json | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause c... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-2273 json | CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted... | Not Provided | 2026-03-10 | 2026-06-23 |
| CVE-2026-1286 json | CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and pot... | Not Provided | 2026-03-10 | 2026-06-24 |
| CVE-2025-13902 json | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could c... | Not Provided | 2026-03-10 | 2026-06-23 |
| CVE-2025-13901 json | CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expe... | Not Provided | 2026-03-10 | 2026-06-23 |
| CVE-2025-13845 json | CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project ... | Not Provided | 2026-01-15 | 2026-04-27 |
| CVE-2025-11739 json | CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrati... | Not Provided | 2026-03-10 | 2026-06-24 |
| CVE-2023-37199 json | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execut... | 7.2 - HIGH | 2023-07-12 | 2023-07-20 |
Known software with vulnerabilities from Schneider-electric
| Type | Vendor | Product | Version |
|---|---|---|---|
| Hardware | Schneider-electric | 140cpu31110 | - |
| Hardware | Schneider-electric | 140cpu31110c | - |
| Operating System | Schneider-electric | 140cpu31110c Firmware | - |
| Operating System | Schneider-electric | 140cpu31110 Firmware | - |
| Hardware | Schneider-electric | 140cpu43412u | - |
| Hardware | Schneider-electric | 140cpu43412uc | - |
| Operating System | Schneider-electric | 140cpu43412uc Firmware | - |
| Operating System | Schneider-electric | 140cpu43412u Firmware | - |
| Hardware | Schneider-electric | 140cpu65150 | - |
| Hardware | Schneider-electric | 140cpu65150c | - |
| Operating System | Schneider-electric | 140cpu65150c Firmware | - |
| Operating System | Schneider-electric | 140cpu65150 Firmware | - |
| Hardware | Schneider-electric | 140cpu65160 | - |
| Hardware | Schneider-electric | 140cpu65160c | - |
| Operating System | Schneider-electric | 140cpu65160c Firmware | - |
| Hardware | Schneider-electric | 140cpu65160s | - |
| Operating System | Schneider-electric | 140cpu65160s Firmware | - |
| Operating System | Schneider-electric | 140cpu65160 Firmware | - |
| Hardware | Schneider-electric | 140cpu65260 | - |
| Hardware | Schneider-electric | 140cpu65260c | - |