Skip to content
Threat Feed
Subscribe

Tag

Schneider-Electric

2 briefs RSS
low advisory

Improper Input Validation in Schneider Electric Modicon M340 Modules

An improper input validation vulnerability (CVE-2025-6625) in Schneider Electric Modicon M340 controllers and communication modules allows unauthenticated attackers to cause a denial-of-service via crafted FTP commands.

Modicon M340 +5 ics cve-2025-6625 denial-of-service schneider-electric
1t 1c
medium advisory

Schneider Electric Easergy MiCOM Px40 Series Information Disclosure via Hard-coded Credentials (CVE-2026-4832)

Schneider Electric Easergy MiCOM Px40 Series products are vulnerable to CVE-2026-4832, a hard-coded credentials flaw (CWE-798) that allows unauthenticated attackers to interrogate the SNMP port and expose basic device identification information from critical manufacturing, energy, and transportation systems assets globally.

Easergy MiCOM P14x +25 ics ot scada vulnerability schneider-electric snmp cve-2026-4832 information-disclosure
2t 1c