Summary
Schneider Electric is aware of a vulnerability impacting its Ritto Wiser™ Door product. The Ritto Wiser™ Door provides convenient door communication: stationary via the highresolution, large-format panel or gateway in the sub-distribution and mobile via an app on smartphone or tablet. We recommend that the below mitigations are put in place to reduce exposure to threat actors who may utilize this vulnerability to unlock a physical door.
Vulnerabilities 1
-
High 8.8
A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communic…
Revision history
-
#1
Original Release
References
-
Ritto Wiser™ Door - SEVD-2022-067-03 PDF Version
https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-067-03_Ritto_Wiser_Door_Security_Notification.pdf&p_Doc_Ref=SEVD-2022-067-03
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/