Summary
Schneider Electric is aware of a vulnerability introduced in the VxWorks patch delivered by Wind
River fixing URGENT/11 vulnerabilities affecting the Modicon LMC078 Logic Controller
Vulnerabilities 1
-
Unscored —
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.
Revision history
-
#1.0.0
Original Release
References
-
Modicon LMC078 Logic Controller additional URGENT/11 Fix - SEVD-2020-161-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2020-161-03_LMC078_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/