Schneider Electric Enerlin'X Com 'X 510

Risk Summary

Successful exploitation of this vulnerability could allow elevation of privileges, which could result in unintended disclosure of device configuration information to any authenticated user.

CVEs (1)

Remediations

• If the Guest account password on the device remains set to the default value, users should immediately change the account password to one that is unique and has a strong value.
• Users who have configured their Com'X 510 device to access remote SMTP, FTP, or HTTPS services should immediately change access passwords on the affected services and update the Com'X configuration.
• To further reduce the risk, apply v6.8.4 or later of the Enerlin'X Com'X 510 firmware.
• For additional information on this vulnerability, see Schneider Electric's security notification SEVD-2021-159-06

Affected Vendors

Affected Products (1)

Affected Sectors

Energy