Security News

Remotely exploitable flaw in Schneider Electric PLCs is a danger to OT networks
2018-09-06 14:05

A vulnerability in the Schneider Electric Modicon M221, a programmable logic controller (PLC) deployed in commercial industrial facilities worldwide, can be exploited to remotely disconnected the...

Flaw in Schneider PLC Allows Significant Disruption to ICS
2018-09-06 11:25

A vulnerability discovered in some of Schneider Electric’s Modicon programmable logic controllers (PLCs) may allow malicious actors to cause significant disruption to industrial control systems...

High-Severity Flaws Patched in Schneider Electric Products
2018-08-29 17:55

The Schneider Electric PowerLogic PM5560 and Modicon M221 are both susceptible to attack via an array of high-severity flaws.

AVEVA Patches Critical Flaws in HMI/SCADA Tools Following Schneider Merger
2018-07-24 16:00

UK-based industrial software company AVEVA has patched two critical remote code execution vulnerabilities discovered by researchers in its InTouch and InduSoft development tools. read more

Critical Flaws Patched in Schneider Building Automation Software
2018-06-15 05:44

Schneider Electric recently patched four vulnerabilities in its U.motion Builder software, including two critical command execution flaws. Advisories have been published by both the vendor and...

Flaw in Schneider PLC Programming Tool Allows Remote Attacks
2018-05-25 11:21

Schneider Electric this week announced that an update for its EcoStruxure Machine Expert product patches a high severity vulnerability that can be exploited remotely to obtain sensitive data. read more

Schneider Electric Patches XXE Vulnerability In Software
2018-05-23 19:28

Schneider Electric on Tuesday issued fixes for a vulnerability its SoMachine Basic software that could result in disclosure and retrieval of arbitrary data.

Vlad that's over: Remote code flaws in Schneider Electric apps whacked
2018-05-02 15:18

Putin the patch, critical infrastructure firms warned Infosec researchers at Tenable Security have unearthed a remote code execution flaw in critical infrastructure software made by energy...

Schneider Electric Patches Critical RCE Vulnerability
2018-05-02 14:13

Researchers found a critical remote code execution vulnerability afflicting two Schneider Electric products that could give attackers to disrupt or shut down plant operations.

Schneider Electric Development Tools Affected by Critical Flaw
2018-05-02 12:12

Security firm Tenable has disclosed the details of a critical remote code execution vulnerability affecting Schneider Electric’s InduSoft Web Studio and InTouch Machine Edition products. read more