Skip to content
OpenAdvisories
Medium 1 exploited CVE ICSA-25-203-05 1 CVE

Schneider Electric System Monitor Application

Published Jul 8, 2025 · Updated Jul 8, 2025

Vendor: Schneider Electric Product: Harmony Industrial PC Product: Pro-face Industrial PC Product: System Monitor application

Summary

Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and
Pro-face PS5000 trusted Legacy industrial PC series products.
The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iPCs which
incorporate slim, flexible and durable design allowing each customer to configure their iPC based on their
individual application needs. These products offer flexible connectivity to a range of devices and designs.
Failure to apply the remediations provided below may risk untrusted code execution which could result in
operational failures.

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025

Revision history

  1. #1.0.0

    Original Release

References