Report a Vulnerability
Customers
Please direct your submission to Technical Support and include the following information:
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Organization name
• Email
• Phone number
• Country
> Contact Technical Support
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Organization name
• Phone number
• Country
> Contact Technical Support
Stay Informed
Register to our security notification mailing list and we will notify you via email on newly released or updated Security Notifications.
Researchers
Follow this link to report a vulnerability. A pre-filled email window will open*. Be sure to fill in all the fields. Only submissions in English will be accepted. Please attach an encrypted report with the following information:
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code
• Impact of the issue, including how an attacker could exploit the issue
• Any other relevant information
* If the link does not work please send your submission to cybersecurity@se.com entitled Vulnerability Report. In the body of the email copy and paste in the following fields:
• First Name
• Last Name
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Source Type
• Organization Name
• Email,
• Phone number
• Country
Note: Schneider Electric will now be releasing security notifications the 2nd Tuesday of every month. By limiting our publish dates to once a month we aim to help our customers plan ahead for patches.
> Report a vulnerability
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code
• Impact of the issue, including how an attacker could exploit the issue
• Any other relevant information
* If the link does not work please send your submission to cybersecurity@se.com entitled Vulnerability Report. In the body of the email copy and paste in the following fields:
• First Name
• Last Name
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Source Type
• Organization Name
• Email,
• Phone number
• Country
Note: Schneider Electric will now be releasing security notifications the 2nd Tuesday of every month. By limiting our publish dates to once a month we aim to help our customers plan ahead for patches.
> Report a vulnerability
Download our PGP key
pub 2048R/01573082 2016-01-11 CPCERT https://keyserver.pgp.com/vkd/SubmitSearch.event?SearchCriteria=cybersecurity%40schneider-electric.com
Schneider Electric Wall of Thanks
Schneider Electric appreciates all the researchers that have responsibly disclosed and coordinated security vulnerabilities with us.
Note: AVEVA product vulnerabilities are no longer handled by Schneider Electric. Please see below for information on how to get support for your product
• AVEVA Products: Please refer to AVEVA Software Global Customer Support for any cybersecurity needs and visit AVEVA Security Updates for cybersecurity bulletins and information.
Read the Privacy Notice for Schneider Electric CPCERT
Firmware PKI
