Schneider Electric VAMPSET

Risk Summary

ATTENTION: Low skill level to exploit.

CVEs (1)

Remediations

• Schneider Electric has updated the VAMPSET tool in order to recognize malformed setting files. A new version of firmware with the fix for this vulnerability is available for download at the following location:
• After the new version of firmware is installed, when a malformed file is loaded VAMPSET will remain operational and report to the user: “Cannot open file.”
• Schneider Electric has issued Security Notification SEVD-2017-061-01, which contains additional information:

Affected Vendors

Affected Products (1)

Affected Sectors

Energy