Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)

Schneider Electric is aware of a vulnerability in the following products:
The Easergy C5 is a scalable and interoperable bay controller, protection and merging unit for large and critical
infrastructure electrical distribution systems.
The Easergy MiCOM P30 is a family of multifunction protection and control relays designed for medium, high
and extra high voltage electrical networks.
The Easergy MiCOM P40 is a protection relay series for Medium Voltage, High Voltage and Extra High Voltage
protection.
The Easergy MiCOM C264 is a modular and compact substation or bay controller, smart RTU and MV one box
solution
The EcoStruxure™ Power Automation System Gateway (EPAS=GTW) is a scalable, interoperable, and
rugged communication gateway that helps to remotely monitor and operate electrical processes
The EcoStruxure Power Automation System User Interface (EPAS-UI) product is an HMI SCADA designed for
electrical networks and substations operations.
The EcoStruxure Power Automation System Intelligent Power Management System and Fast Load Shedding
(iPMFLS) is a range of solutions designed to overcome size and performances constraints.
The EcoStruxure™ Power Operation (EPO) are an on-premises software offers that provides a single platform
to monitor and control medium and lower power systems.
The PowerLogic™ P5 is a medium voltage protection relay.
The PowerLogic™ P7 is a protection and control platform designed for complex and advanced electrical
network applications.
The PowerLogic™ T300 is a modular platform for medium voltage and low voltage public distribution network
management.
The PowerLogicTM T500 is a control unit and RTU for substation automation.
The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and
transmission network management.
The EasyLogic T150 (formerly Saitel DR RTU) is a field device, offering a solid and powerful platform for data
acquisition, communication, automation and IED integration for distribution and transmission networks,
generation sector and railway.
Failure to apply the fix provided below may risk session hijacking, which could result in malicious actors
performing unauthorized operations within the affected system.