Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities

CVEs (4)

Remediations

• Schneider Electric has two divisions supporting this product under separate organizations. Patch availability and technical information is available at these separate divisional support units. Schneider Electric has issued separate security notices for each specific division/product support center.
• SEVD-2015-054-01 – InduSoft Web Studio Schneider Electric has released patches, available for download, to remediate the noted vulnerabilities. The patch for InduSoft Web Studio, Version 7.1.3.4, Service Pack 3, Patch 4, is available for download using this URL: (http://www.indusoft.com/dev/INDUSOFT/Release/IWS71.3.4/IWS71.3.4.zip)
• SEVD-2015-054-02 - InTouch Machine Edition 2014 This document is intended to help provide an overview of the identified vulnerability and actions required to mitigate it. To obtain full details on the issues and assistance on how to protect your installation, please contact your local Schneider Electric representative. These organizations will be fully aware of the situation and can support you through the process. For further information on vulnerabilities in Schneider Electric’s products, please visit Schneider Electric’s cybersecurity web page at: (http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page)

Affected Vendors

Affected Products (2)