Summary
Schneider Electric is aware of a vulnerability in its PowerLogic ION Setup product.
The PowerLogic ION Setup product is an engineering tool for configuration and maintenance of PowerLogic metering devices.
Failure to apply the remediations provided below may risk remote code execution, which could result in a compromise of the engineering workstation running the ION Setup software.
Vulnerabilities 1
-
High 8.0
A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attac…
Revision history
-
#1
Original Release
References
-
PowerLogic ION Setup - SEVD-2022-130-01 PDF Version
https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-130-01_PowerLogic_ION_Setup_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/