Summary
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. EcoStruxure Machine SCADA Expert is a powerful software for developing HMI, SCADA, OEE and Dashboard projects dedicated to Line Management & Lite Supervision applications to run in Harmony Industrial PC and GTU Open Box. Pro-face BLUE Open Studio is a development and runtime software that incorporates all of the tools users need to create SCADA HMI applications, dashboards and OEE interfaces. Failure to apply the mitigations provided below may risk a modification of project files which could result in arbitrary code execution, information disclosure, or denial of service.
Revision history
-
#1
Original Release
References
-
EcoStruxure Machine SCADA Expert Pro-face BLUE Open Studio - SEVD-2022-256-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-256-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-256-01-EcoStruxure_Machine_SCADA_ExpertPro-face_BLUE_Open_Studio_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/