CVE-2019-6814: Schneider Electric NET5500 Firmware

Critical severity, CVSS 9.8. EPSS: 36.7% chance of exploitation in the next 30 days.

A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.

Affected products

• Schneider Electric NET5500 Firmware: before 2.1.9.7 (fixed in 2.1.9.7)
• Schneider Electric NET5501-I Firmware: before 2.1.9.7 (fixed in 2.1.9.7)
• Schneider Electric NET5501-Xt Firmware: before 2.1.9.7 (fixed in 2.1.9.7)
• Schneider Electric NET5501 Firmware: before 2.1.9.7 (fixed in 2.1.9.7)
• Schneider Electric NET5504 Firmware: before 2.1.9.7 (fixed in 2.1.9.7)
• Schneider Electric NET5508 Firmware: before 2.1.9.7 (fixed in 2.1.9.7)
• Schneider Electric NET5516 Firmware: before 2.1.9.7 (fixed in 2.1.9.7)

Published 2019-05-22. Last modified 2026-06-17.