Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Control Expert product.
EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon M340, M580, M580S, Premium, Momentum and Quantum ranges.
Failure to apply the remediations provided below may risk the EcoStruxure™ Control Expert software to crash.
Vulnerabilities 1
-
Medium 5.5
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…
Revision history
-
#1.0.0
Original Release
References
-
EcoStruxure™ Control Expert - SEVD-2022-221-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-221-03_EcoStruxure_Control_Expert_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/