Schneider Electric Web Designer for Modicon

RISK EVALUATION Successful exploitation of this vulnerability could result in information disclosure, workstation integrity and potential remote code execution on the compromised computer. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on January 30, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-030-01 Hitachi Energy UNEM ICSA-25-030-02 New Rock Technologies Cloud Connected...

Schneider Electric EcoStruxure Power Monitoring Expert 跨站脚本漏洞

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France for power distribution monitoring in IoT environments. A cross-site scripting vulnerability exists in the Schneider Electric EcoStruxure Power Monitoring Expert, which arises from improper input...

The software for creating automation projects of Schneider Electric’s Web Designer network modules BMXNOE0110H, BMENOC0311C, BMENOC0321C, and BMXNOR0200H is vulnerable due to incorrect restrictions on XML references to external objects. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software used for creating automation projects in Schneider Electric’s Web Designer for network modules BMXNOE0110H, BMENOC0311C, BMENOC0321C, and BMXNOR0200H is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows ...

Fuji Electric Alpha5 SMART Stack Buffer Overflow Vulnerability

The Fuji Electric Alpha5 SMART is a high-performance AC servo system designed for high-speed and high-precision control. A stack buffer overflow vulnerability exists in the Fuji Electric Alpha5 SMART. The vulnerability is due to the system failing to perform proper boundary checks on input data...

CVE-2024-34579

Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

CVE-2024-34579

The evidence in Connected documents identifies Fuji Electric Alpha5 Smart (Alpha5 SMART) as affected by a stack-based buffer overflow in C5V file parsing. The root cause is failure to validate the length of user-supplied data prior to copying it to a stack-based buffer, enabling potential arbitra...

CVE-2024-34579 Fuji Electric Alpha5 SMART Stack-Based Buffer Overflow

Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

CVE-2024-34579 Fuji Electric Alpha5 SMART Stack-Based Buffer Overflow

Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

CVE-2024-34579: Stack-based Buffer Overflow

Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

Schneider Electric RemoteConnect and SCADAPack 代码问题漏洞

Schneider Electric RemoteConnect and SCADAPack is a single software tool from Schneider Electric, France, for users to monitor, configure, program, and debug SCADAPack Smart RTUs. A code issue vulnerability exists in Schneider Electric RemoteConnect and SCADAPack that stems from the inclusion of ...

Fuji Electric Alpha5 SMART 安全漏洞

The Fuji Electric Alpha5 SMART is a high-performance AC servo system designed for high-speed and high-precision control. A stack buffer overflow vulnerability exists in the Fuji Electric Alpha5 SMART. The vulnerability is due to the system failing to perform proper boundary checks on input data...

Schneider Electric Pro-face GP-Pro EX和Remote HMI 安全漏洞

Schneider Electric Pro-face GP-Pro EX and Schneider Electric Pro-face Remote HMI are both products of Schneider Electric, France.Schneider Electric Pro-face GP-Pro EX is an HMI operation management system. Schneider Electric Pro-face GP- EX is a human-machine interface operator management system,...

Schneider Electric Web Designer 代码问题漏洞

Schneider Electric Web Designer is a web design tool from Schneider Electric France. A code issue vulnerability exists in Schneider Electric Web Designer that stems from the inclusion of an XML External Entity References Improperly Restricted vulnerability that could lead to information disclosur...

CISA Releases Twelve Industrial Control Systems Advisories

CISA released twelve Industrial Control Systems ICS advisories on January 16, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-016-01 Siemens Mendix LDAP ICSA-25-016-02 Siemens Industrial Edge Management...

Vulnerabilities fixed in Schneider Electric Modicon

Schneider Electric has fixed vulnerabilities in Modicon M340, M580 and various communication modules. A malicious party could exploit the vulnerabilities to cause a denial-of-service or gain access to system data and possibly affect the operation of the controllers. For successful abuse, the...

NEC Aterm WX1500HP 操作系统命令注入漏洞

The NEC Aterm WX1500HP is a wireless router from Nippon Electric NEC. An operating system command injection vulnerability exists in NEC Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier, which originates from allowing an attacker to execute arbitrary OS commands over the...

NEC Aterm多款产品 访问控制错误漏洞

The NEC Aterm WF1200C and others are a wireless router from Nippon Electric NEC. An access control error vulnerability exists in various NEC Aterm products that stems from a lack of authentication for critical functions, allowing an attacker to obtain Wi-Fi passwords over the Internet. The...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-014-01 Hitachi Energy FOXMAN-UN ICSA-25-014-02 Schneider Electric Vijeo Designer...

Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior...