C
CVE Numbering Authority

schneider Schneider Electric

Country
France
Organization type
Vendor
Program role
CNA
Root
mitre
Scope
Products supported by Schneider Electric and its affiliates, including products branded Schneider Electric or any other brands owned or controlled by Schneider Electric (such as but not limited to APC, Eliwell, Proface, ProLeit, Lauritz Knudsen Electrical & Automation, etc.), excluding Aveva and RIB products.

CVE Program partner profile

65.48/100 over 23 records in the last 180 days · 49.93/100 over 739 all-time
The rules, last 180 days Share of the records earning each credit, and the points it is worth.

Describe: can a reader tell what the vulnerability is?

20.48 / 25
Description
An English description that is not a placeholder: full credit from 200 characters, 0.7 from 80, 0.4 from 40, none below.
96% · 9.61/10
Title
A title.
17% · 0.87/5
Cwe
A weakness as a CWE identifier in problemTypes; a free-text problem type without one earns a quarter.
100% · 10.0/10

Scope: can a reader tell whether they are affected?

18.0 / 25
Affected
An affected entry naming both a vendor and a product; one side missing or 'n/a' earns half.
100% · 10.0/10
Versions
An affected entry stating versions, as a version or a bound; a defaultStatus alone earns half.
100% · 8.0/8
Cpe
A CPE on an affected entry, or a cpeApplicability block.
0% · 0.0/7

Assess: can a reader tell how bad it is?

20.0 / 25
Severity
A severity statement in the CNA container: a CVSS v3 or v4 vector, an SSVC decision, or a vendor rating as an 'other' metric. A CVSS v2 vector alone earns half.
100% · 15.0/15
Modern severity
A CVSS v4 vector or an SSVC decision.
100% · 5.0/5
Impacts
An impacts entry (a CAPEC identifier or an impact description).
0% · 0.0/5

Act: can a reader tell what to do about it?

7.0 / 25
References
At least one reference.
100% · 7.0/7
Reference tags
At least one reference carrying tags.
0% · 0.0/5
Remediation
A reference tagged 'patch'; one tagged 'vendor-advisory', 'mitigation' or 'release-notes' earns 0.6.
0% · 0.0/8
Solutions
A solution or a workaround.
0% · 0.0/5
Context, not score
Severity supplied by an ADP
0% (0 records)
Weakness supplied by an ADP
0% (0 records)
No severity statement
0%
Descriptions under 100 characters
0%
Known exploited
0
Reservation to publication
median 29.8 days · p90 185.3 days
Rejected records
0
Score per publication year
2017: 41.26 (17 records) 2018: 40.58 (84 records) 2019: 43.11 (83 records) 2020: 44.34 (118 records) 2021: 44.74 (87 records) 2022: 47.28 (105 records) 2023: 59.78 (94 records) 2024: 60.02 (48 records) 2025: 63.77 (61 records) 2026: 64.98 (42 records)
202664.9842
202563.7761
202460.0248
202359.7894
202247.28105
202144.7487
202044.34118
201943.1183
201840.5884
201741.2617
Badge

Embed the current grade; it follows the rolling window and reads "unranked" under the threshold.

[![schneider scorecard](https://vulnerability.circl.lu/assigners/schneider/badge.svg)](https://vulnerability.circl.lu/assigners/schneider)