Summary
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony
Industrial PC Series and Pro-face PS5000 trusted Legacy industrial PC Series product(s).
The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iPCs
which incorporate slim, flexible and durable design allowing each customer to configure their
iPC based on their individual application needs. These products offer flexible connectivity to a
range of devices and designs.
Failure to apply the remediations provided below may risk denial of service, sensitive
information disclosure, integrity issues , which could result in operational failures.
Vulnerabilities 1
-
Critical 9.8
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of c…
Revision history
-
#1.0.0
Original Release
References
-
System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs - SEVD-2024-282-07 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-07&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2024-282-07.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/
-
ICS Advisory ICSA-25-030-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-03
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B