{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"EcoStruxure Control Expert versions ant\u00e9rieures \u00e0 16.2HF003","product":{"name":"EcoStruxure","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Connexium Managed Switches toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-3596","product":{"name":"Connexium Managed Switches","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P741, P742 et P743 versions ant\u00e9rieures \u00e0 B2A pour la vuln\u00e9rabilit\u00e9 CVE-2026-4832","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P746 versions ant\u00e9rieures \u00e0 C4E","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Modicon Managed Switches toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-3596","product":{"name":"Modicon","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P642, P645 versions ant\u00e9rieures \u00e0 B4A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P342, P343, P344, P345 versions ant\u00e9rieures \u00e0 B3F","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P841 versions ant\u00e9rieures \u00e0 G6A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P14x versions ant\u00e9rieures \u00e0 B4A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P442, P444 versions ant\u00e9rieures \u00e0 E3A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Modicon Redundancy Switches toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-3596","product":{"name":"Modicon","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P341 versions ant\u00e9rieures \u00e0 E3F","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P643 versions ant\u00e9rieures \u00e0 B3F","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P849 versions ant\u00e9rieures \u00e0 B4A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P24x versions ant\u00e9rieures \u00e0 D3A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P746 versions ant\u00e9rieures \u00e0 B4E","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}},{"description":"Easergy MiCOM P443, P445, P446, P543, P544, P545 et P546 versions ant\u00e9rieures \u00e0 H6A","product":{"name":"Easergy MiCOM","vendor":{"name":"Schneider Electric","scada":true}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2024-3596","url":"https://www.cve.org/CVERecord?id=CVE-2024-3596"},{"name":"CVE-2024-8935","url":"https://www.cve.org/CVERecord?id=CVE-2024-8935"},{"name":"CVE-2024-8933","url":"https://www.cve.org/CVERecord?id=CVE-2024-8933"},{"name":"CVE-2026-4832","url":"https://www.cve.org/CVERecord?id=CVE-2026-4832"}],"links":[],"reference":"CERTFR-2026-AVI-0433","revisions":[{"description":"Version initiale","revision_date":"2026-04-14T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Schneider Electric. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Schneider Electric","vendor_advisories":[{"published_at":"2026-04-14","title":"Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2026-104-03","url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-03.pdf"},{"published_at":"2024-11-12","title":"Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2024-317-02","url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-317-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-317-02.pdf"},{"published_at":"2026-04-14","title":"Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2026-104-02","url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-02.pdf"}]}
