Schneider Electric EcoStruxure Power Automation System

CVEs (1)

Remediations

• Hotfix WebHMI_Fix_users_for_Standard.V1 of WebHMI includes a fix for this vulnerability and can be obtained from Schneider Electric Customer Care Center.
• In addition to the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: * Once the hotfix, WebHMI_Fix_users_for_Standard.V1, has been applied, we recommend ensuring that all hardening guidelines provided with the product are implemented to maintain best practices for defense in-depth. Specifically, the WebHMI should not be exposed to the internet. Contact Customer Care Center https://www.se.com/us/en/work/support/contacts.jsp for assistance is required.

Affected Vendors

Affected Products (3)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Energy