<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: Schneider Electric vulnerabilities</title><link>https://patchfirst.co/vendor/schneider-electric/</link><atom:link href="https://patchfirst.co/feed/vendor/schneider-electric.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited Schneider Electric CVEs, with CISA KEV, EPSS and ATT&amp;CK context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>CVE-2024-5559: CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service…</title><link>https://patchfirst.co/cve/CVE-2024-5559/</link><guid isPermaLink="false">CVE-2024-5559</guid><pubDate>Wed, 12 Jun 2024 00:00:00 GMT</pubDate><description>Schneider Electric · PowerLogic P5. Not in CISA KEV. EPSS 0.2% (higher than 7.7% of CVEs). CVSS 6.1 MEDIUM. Named in 1 threat report. Priority 11.0 of 100.</description></item><item><title>CVE-2022-34753: A CWE-78: Improper Neutralization of Special Elements used in an OS Command (&apos;OS Command Injection&apos;) vulnerability…</title><link>https://patchfirst.co/cve/CVE-2022-34753/</link><guid isPermaLink="false">CVE-2022-34753</guid><pubDate>Wed, 13 Jul 2022 00:00:00 GMT</pubDate><description>Schneider Electric · SpaceLogic C-Bus Home Controller. Not in CISA KEV. EPSS 70.5% (higher than 99.39% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 66.7 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2018-7841: Schneider Electric U.motion Builder SQL Injection Vulnerability</title><link>https://patchfirst.co/cve/CVE-2018-7841/</link><guid isPermaLink="false">CVE-2018-7841#kev</guid><pubDate>Fri, 15 Apr 2022 00:00:00 GMT</pubDate><description>Schneider Electric · U.motion Builder. In CISA KEV since 2022-04-15. ENISA EUVD lists it as exploited. EPSS 72.5% (higher than 99.44% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>CVE-2018-8872: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from…</title><link>https://patchfirst.co/cve/CVE-2018-8872/</link><guid isPermaLink="false">CVE-2018-8872</guid><pubDate>Fri, 04 May 2018 00:00:00 GMT</pubDate><description>Schneider Electric · Triconex Tricon. Not in CISA KEV. EPSS 2.2% (higher than 82.5% of CVEs). Named in 1 threat report. Priority 55.4 of 100.</description></item><item><title>CVE-2018-7522: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers…</title><link>https://patchfirst.co/cve/CVE-2018-7522/</link><guid isPermaLink="false">CVE-2018-7522</guid><pubDate>Fri, 04 May 2018 00:00:00 GMT</pubDate><description>Schneider Electric · Triconex Tricon. Not in CISA KEV. EPSS 0.4% (higher than 36% of CVEs). Priority 42.2 of 100.</description></item></channel></rss>