Vendor

Schneider Electric

1 of 5 Schneider Electric CVEs in Patchfirst (20%) are in of vulnerabilities exploited in the wild.

CVEs: 5
In CISA KEV: 120%
Known ransomware use: 0
Median days to KEV: 1,059; from publication
Latest KEV listing: 15 Apr 2022

Watch Schneider Electric Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
U.motion Builder In KEV: 1 CVEs: 1
Triconex Tricon In KEV: 0 CVEs: 2
PowerLogic P5 In KEV: 0 CVEs: 1
SpaceLogic C-Bus Home Controller In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Schneider Electric CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 1
T1059Command and Scripting Interpreter CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/schneider-electric.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Schneider Electric CVEs linked to the technique. Each link’s provenance is on the CVE page.

Schneider Electric CVEs

5 CVEs, by priority

CVE-2018-7841Schneider Electric U.motion Builder SQL Injection Vulnerability
Schneider Electric · U.motion BuilderKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
72.5%Top 0.56%
69.7priority
CVE-2022-34753A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…
Schneider Electric · SpaceLogic C-Bus Home ControllerPublic exploitHigh · 8.8
70.5%Top 0.61%
66.7priority
CVE-2018-8872In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from…
Schneider Electric · Triconex Tricon1 report
2.2%Top 17%
55.4priority
CVE-2018-7522In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers…
Schneider Electric · Triconex Tricon
0.4%Top 64%
42.2priority
CVE-2024-5559CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service…
Schneider Electric · PowerLogic P5Medium · 6.11 report
0.2%Top 92%
11.0priority