PT-2018-18279

Name of the Vulnerable Software and Affected Versions: Schneider Electric SoMachine Basic versions prior to 1.6 SP1 Description: The issue is related to an XML External Entity XXE vulnerability, which uses the DTD parameter entities technique. This results in the disclosure and retrieval of...

CVE-2017-7574: Use of Hard-coded Credentials

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML...