Schneider Electric advisories

[armijnhemel]

Schneider Electric has their own vulnerability naming scheme. Some examples can be found in the cvelist repository, example:

https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/2xxx/CVE-2025-2002.json
https://github.com/CVEProject/cvelistV5/blob/main/cves/2018/7xxx/CVE-2018-7800.json

(search for "SEVD")

The main Schneider Electric notifications page:

https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp

Please note that there are some advisories there which have not been assigned a CVE.

[kx7m2qd]

Hi, I'd like to work on this. I can see Schneider uses a custom SEVD naming scheme and some advisories don't have CVEs assigned. I plan to scrape the notifications page, handle both CVE-mapped and non-CVE advisories, and cross-reference with the CVE list where possible. Is there an existing importer that handles custom vendor naming schemes I should model after