Stay Informed
Register to our security notification mailing list and we will notify you via email on newly released or updated Security Notifications.
Report a Vulnerability
Customers
Please direct your submission to Technical Support and include the following information:
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Organization name
• Email
• Phone number
• Country
> Contact Technical Support
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Organization name
• Phone number
• Country
> Contact Technical Support
Researchers
Follow this link to report a vulnerability. A pre-filled email window will open*. Be sure to fill in all the fields. Only submissions in English will be accepted. Please attach an encrypted report with the following information:
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code
• Impact of the issue, including how an attacker could exploit the issue
• Any other relevant information
* If the link does not work please send your submission to cybersecurity@se.com entitled Vulnerability Report. In the body of the email copy and paste in the following fields:
• First Name
• Last Name
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Source Type
• Organization Name
• Email,
• Phone number
• Country
Note: Schneider Electric will now be releasing security notifications the 2nd Tuesday of every month. By limiting our publish dates to once a month we aim to help our customers plan ahead for patches.
> Report a vulnerability
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code
• Impact of the issue, including how an attacker could exploit the issue
• Any other relevant information
* If the link does not work please send your submission to cybersecurity@se.com entitled Vulnerability Report. In the body of the email copy and paste in the following fields:
• First Name
• Last Name
• Product Line
• Vulnerable Version
• Vulnerability type [CWE ID if available]
• Source Type
• Organization Name
• Email,
• Phone number
• Country
Note: Schneider Electric will now be releasing security notifications the 2nd Tuesday of every month. By limiting our publish dates to once a month we aim to help our customers plan ahead for patches.
> Report a vulnerability
Download our PGP key
pub 2048R/01573082 2016-01-11 CPCERT https://keyserver.pgp.com/vkd/SubmitSearch.event?SearchCriteria=cybersecurity%40schneider-electric.com
Note: AVEVA product vulnerabilities are no longer handled by Schneider Electric. Please see below for information on how to get support for your product
• AVEVA Products: Please refer to AVEVA Software Global Customer Support for any cybersecurity needs and visit AVEVA Security Updates for cybersecurity bulletins and information.
Read the Privacy Notice for Schneider Electric CPCERT
Firmware PKI
