CVE-2016-8374

CVE-2016-8374 affects Schneider Electric Magelis HMI panels (GTO, GTU, STO/STU, XBT lines) where the Web Gate Server Web UI can be overwhelmed, causing UNCONTROLLED RESOURCE CONSUMPTION and denial of service. Root cause is improper handling of HTTP requests leading to resource exhaustion; exploit...

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...

Schneider Electric Magelis HMI Advanced Panel Remote Denial Of Service (CVE-2016-8367; CVE-2016-8374)

A denial of service vulnerability exists in Schneider Electric Magelis HMI Advanced Panel, AKA Panelshock. The vulnerability is due to insufficient validation of incoming requests. A remote attacker can exploit this vulnerability by enticing an authenticated user to view crafted web content. This...