Summary
Schneider Electric is aware of multiple vulnerabilities in the Schneider Electric C-Bus Home Automation products listed below.
The Schneider Electric C-Bus Home Automation products are fully integrated systems that can control and automate lighting and many other electrical systems and products.
Failure to apply the remediations provided below may risk unauthorized access, which could allow an unauthorized individual to control the device.
Vulnerabilities 2
-
Critical 9.8
A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device w…
-
Critical 9.8
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when…
Revision history
-
#1
Original Release
References
-
Schneider Electric C-Bus Home Automation Products - SEVD-2022-165-06 PDF Version
https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-06_C-Bus_Home_Automation_Products_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/