Summary
Schneider Electric is aware of a vulnerability in its CanBRASS product.
The CanBRASS product (https://www.se.com/ww/en/product-range/61293-canbrass/#software-and-firmware) is a design and costing tool for Canalis busbar trunking runs.
Failure to apply the remediation provided below may risk remote code execution which could result in unauthorized execution of code.
Vulnerabilities 1
-
Medium 5.3
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…
Revision history
-
#1
Original Release
References
-
CanBRASS - SEVD-2022-165-07 PDF Version
https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-07_CanBRASS_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/