Vendors › Schneider Electric

Schneider Electric security advisories

5 CISA ICS advisories for Schneider Electric in the last tracking window, 3 flagged as relevant to oil & gas. Newest first.

Medium 5.3 ICSA-26-260-07 · Sep 17, 2026 · Microsoft, Red Hat, SUSE, Schneider Electric

Schneider Electric PowerChute Serial Shutdown

CISA reports 1 vulnerability in Microsoft, Red Hat, SUSE, Schneider Electric PowerChute™ Serial Shutdown, Windows, Enterprise Linux. Weakness type: Improper Restriction of Excessive Authentication Attempts. Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The PowerChute Serial …

What to do: Plan: Version v1.6 of PowerChute™ Serial Shutdown includes a fix for these vulnerabilities and is available for download here: • Windows: https://www.se.com/ww/en/download/document/SPD-PCSS_WIN_EN/ Reboot needed: Upon installation, the service…
Medium 6.4 ICSA-26-260-05 · Sep 17, 2026 · Schneider Electric

Schneider Electric NetBotz 5 750/755

CISA reports 2 vulnerabilities in Schneider Electric NetBotz 5 750, NetBotz 5 755. Weakness types: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), SQL Injection: Hibernate. Schneider Electric is aware of multiple vulnerabilities in its NetBotz 5 – 750/755 products.The NetBotz…

What to do: Plan: Version 5.6.0 of NetBotz 5 750/755 includes a fix for these vulnerabilities and is available for download here: https://www.se.com/us/en/product-range/61830-netbotz/#software-and-firmware Reboot needed: Upon install, the offer will…
High 7.5 Oil & gas relevant ICSA-26-260-04 · Sep 17, 2026 · Schneider Electric

Schneider Electric Modicon M340 Controller and Communication Modules

CISA reports 1 vulnerability in Schneider Electric Modicon M340 Firmware, Modicon M340 Controller, Ethernet / Serial RTU Module, M580 Global Data module and 3 more. Weakness type: Improper Input Validation. Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-mo…

What to do: Prioritize: Version 3.60 of BMXNOE0100 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/BMXNOE0100/networkmodule-modicon-m340-modbus-tcp-1-x-rj45-flash-memorycard/ Reboot is needed to…
Medium 6.5 Oil & gas relevant ICSA-26-258-04 · Sep 15, 2026 · Schneider Electric

Schneider Electric SCADAPack x70 Products

CISA reports 1 vulnerability in Schneider Electric SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and 3 more. Weakness type: Insufficiently Protected Credentials. Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470…

What to do: Plan: Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control.
High 7.8 Oil & gas relevant ICSA-26-211-04 · Jul 30, 2026 · Schneider Electric

Schneider Electric IGSS

CISA reports 1 vulnerability in Schneider Electric IGSS, IGSS Definition (Def.exe) module. Weakness type: Out-of-bounds Write. Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) product. The [IGSS](https://igss.schneider-electric.com/) product …

What to do: Prioritize: Version 18.0.0.26125 of the IGSS Definition module includes a fix for this vulnerability and is available for download through IGSS Master > Update IGSS Software or here:…