Schneider Electric

What is Schneider Electric?

Schneider Electric is a French technology company that supplies equipment and software for energy management and industrial automation, from power distribution, UPS units and variable speed drives to PLCs, SCADA, DCS and safety systems. In OT you mostly know the company from its Modicon PLCs, Altivar drives, Foxboro and Triconex systems and the industrial software of its subsidiary AVEVA. Schneider thus combines electrical infrastructure and industrial control systems in a single portfolio, which makes it a major player in OT convergence and Industry 4.0.

🏢 How did Schneider Electric come about?

Its roots go back to 1836, when the brothers Adolphe and Eugène Schneider took over an iron foundry in Le Creusot. For a long time the company made steel, locomotives and armaments. From the late 1980s onwards, Groupe Schneider reinvented itself through acquisitions as an electrical engineering group. Headquarters are in Rueil-Malmaison near Paris, the shares are listed on Euronext Paris (CAC 40), and the company reported revenue of 40.2 billion euros for 2025 with roughly 160,000 employees in more than a hundred countries. Olivier Blum has been CEO since November 2024.

⚙️ Which product lines will you meet in OT?

The OT portfolio is large, and documentation and asset registers often still carry old names. Knowing the current names and their predecessors helps.

Modicon PLCs are programmed in the IEC 61131-3 languages. The Modicon 084 from 1969 is widely regarded as the first commercially successful PLC, and Modicon published the Modbus protocol in 1979. The Modicon M580 was launched in 2014 as an ePAC (Ethernet Programmable Automation Controller): a PAC with Ethernet built into the backplane, designed to pass process data to higher layers without gateways.

🔌 What is EcoStruxure?

EcoStruxure is the umbrella architecture and brand under which Schneider brings together its energy and automation products and software. It is therefore not a single SCADA package but a reference architecture in three layers:

The layering maps onto the Purdue Model: the lower layers are real-time OT, while the top layer runs on-premises or in the cloud. For new projects Schneider also promotes EcoStruxure Automation Expert, an engineering environment based on IEC 61499. The aim is to decouple control software from hardware, so the same application can run on PLCs, drives or industrial PCs from different vendors. UniversalAutomation.org, an independent association that maintains a shared runtime, was set up for this purpose in 2021.

🌐 Which protocols does Schneider Electric support?

Schneider equipment speaks virtually every common industrial protocol. Modbus remains the common thread, since it originated at Modicon.

For engineering, Schneider also uses its proprietary UMAS protocol, which runs over Modbus function code 90. Engineering tools use it to download programs and to start or stop the CPU, which is exactly what makes it attractive to attackers.

🏭 In which sectors will you find Schneider?

• Water and infrastructure - Modicon M340 and M580 with Geo SCADA for pumping stations, treatment plants and telemetry, including alarm management for the central control room.
• Process industry - Foxboro DCS and Triconex in chemicals, refining and power generation, designed to IEC 61508 and IEC 61511.
• Machine building - compact Modicon controllers, Lexium servos and safety modules for machinery under ISO 13849 and IEC 62061.
• Power distribution - switchgear, PowerLogic meters and protection relays in plants and grid operations.
• Buildings and data centres - EcoStruxure Building Operation, APC UPS units and cooling.

What sets Schneider apart is the combination of energy and automation: a plant can monitor power consumption, power quality and production data in one environment. Software such as AVEVA Historian and MES makes that data available for analysis and digital twins.

🔐 What cybersecurity risks apply to Schneider systems?

Schneider equipment runs in a great deal of critical infrastructure and is therefore a known target:

• TRITON (2017) - malware that tried to reprogram Triconex safety controllers at a Saudi petrochemical plant; the first known attack on an SIS.
• ModiPwn (2021) - authentication bypass in the M340 and M580 via undocumented UMAS commands.
• PIPEDREAM (2022) - an attack toolkit that could, among other things, discover Schneider machine controllers and attack them via CODESYS.

Schneider publishes its security notifications centrally, usually on the second Tuesday of the month, and provides hardening guidelines per product. The Modicon M580 holds Achilles Level 2 certification and Schneider positions new products against IEC 62443. Even so, you still have to protect your own environment:

🔧 How do you manage a Schneider installation in practice?

1. Take inventory of all controllers, firmware versions, drives and software versions in an asset inventory, including old names such as Quantum, Premium, Magelis and ClearSCADA.
2. Determine the lifecycle - Schneider has ended sales of Quantum and Premium (Quantum CPUs at the end of 2018, the last Quantum I/O at the end of 2022) and names the M580 as the migration path, with existing Quantum I/O and applications reusable. Plan this as part of lifecycle management; PLCs often run for 15 to 25 years.
3. Enable CPU security - application passwords, IP access lists and disabling unused services such as FTP and HTTP.
4. Separate safety from control - keep Triconex and other SIS networks physically or logically separated from process control.
5. Secure supplier obligations - under the Dutch Cybersecurity Act, in force since 15 August 2026, essential and important entities must also manage their supply chain. The Cyber Resilience Act requires manufacturers such as Schneider to report actively exploited vulnerabilities from 11 September 2026 and applies in full from 11 December 2027.

🔄 How does Schneider compare with other vendors?

A drawback users often mention is the complexity of the portfolio: because of the many acquisitions, product generations, engineering tools and names overlap, which complicates migrations and knowledge retention.

❓ Frequently asked questions

Is Modicon the same as Schneider Electric?

No, Modicon is a product brand of Schneider Electric. Modicon was originally an American company that released the Modicon 084 in 1969 and published Modbus in 1979. It came fully into the hands of Groupe Schneider via AEG in the mid-1990s.

Is AVEVA owned by Schneider Electric?

Yes, AVEVA has been a wholly owned subsidiary of Schneider Electric since 18 January 2023. Before that, Schneider had held around 60% of the listed AVEVA since the 2018 merger. Products such as InTouch and System Platform come from the Wonderware line that Schneider acquired with Invensys in 2014.

What is the difference between EcoStruxure and a SCADA system?

EcoStruxure is Schneider Electric’s umbrella architecture and brand for products, control and analytics. It includes concrete SCADA products such as Geo SCADA Expert, but also PLC software, energy management and building management. A SCADA system is therefore just one part of the broader EcoStruxure architecture.

Which DCS does Schneider Electric supply?

Schneider Electric supplies the EcoStruxure Foxboro DCS for large process plants and EcoStruxure Process Expert, which runs on Modicon M580 controllers. Foxboro joined Schneider in 2014 with the acquisition of Invensys. For safety functions, the DCS is often combined with a Triconex safety system.

Was TRITON an attack on Schneider Electric?

TRITON was an attack on a petrochemical plant that used Schneider Electric Triconex safety controllers, not on Schneider itself. The malware entered via a Windows engineering workstation and tried to reprogram the controllers. Schneider has since fixed the vulnerabilities that were exploited.

How do I stay informed about vulnerabilities in Schneider products?

Schneider Electric publishes security notifications on its website, usually on the second Tuesday of the month, and the vulnerabilities receive CVE identifiers. Link those notifications to your asset inventory so you can see which firmware is affected in each installation. Then schedule updates in maintenance windows through your patch management process.

📌 In summary

Schneider Electric is one of the few vendors that supplies both electrical infrastructure and process control: Modicon PLCs, Altivar drives, Foxboro DCS, Triconex safety systems and, through AVEVA, SCADA and historian software. The many acquisitions make the portfolio broad but also complex, with old product names living on in installations for years. If you manage Schneider systems, take lifecycle, segmentation and tracking security notifications seriously.

Schneider Electric brings energy management and industrial automation together in a single portfolio, from Modicon and Altivar to Triconex and AVEVA.