Summary
Schneider Electric is aware of a vulnerability in its Modicon Managed Switch products.
The Modicon Managed Switch products are designed for the special requirements of industrial
automation. The devices allow users to set up switched Industrial Ethernet networks.
Failure to apply the firmware upgrade or mitigations provided below may allow an attacker to
change the password of any user, which could cause all or part of the switch to be controlled by
the attacker. That could result in various attack types like denial of service or provide access to
unauthorized devices on the network.
Vulnerabilities 1
-
Unscored —
Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSE…
Revision history
-
#1.0.0
Original Release
References
-
Modicon Managed Switch - SEVD-2021-130-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-130-01_Modicon_Managed_Switch_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/