← Back to home
ICSA-21-105-01  ·  Published 2021-04-15  ·  View on CISA ICS-CERT ↗

Schneider Electric C-Bus Toolkit

CVSS 8.8 HIGH

Risk Summary

Successful exploitation of these vulnerabilities may allow remote code execution.

Remediations

  • Schneider Electric recommends users update to the latest version available. A reboot will be needed after the update.
  • If users choose not to apply the remediation provided above they should immediately apply the following mitigations to reduce the risk of exploit: Use an allow list for this application. Turn on the workstation’s firewall. Use an antivirus program. Secure the workstation from unauthorized personnel.
  • Please see Schneider Electric’s publication SEVD-2021-103-01 for more information.

Affected Vendors

Schneider Electric Software, LLC

Affected Products (1)

Schneider Electric Software, LLC · C-Bus Toolkit <= 1.15.7

Affected Sectors

Commercial Facilities

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more