Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Operation and Power SCADA Operation software. EcoStruxure™ Power Operation and EcoStructure™ Power SCADA Operation are on-premises software offers that provides a single platform to monitor and control medium and lower power systems.
Failure to apply the remediation provided below may risk result in a loss of data confidentiality, data integrity issues, or a loss of access to the server.
Vulnerabilities 1
-
Unscored —
A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, cha…
Revision history
-
#2.0.0
There is an update to the EcoStruxure™ Power SCADA Operation 2020 remediation advising customers to move to 2020 R2 instead of 2020 CU2
-
#1.0.0
Original Release
References
-
EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2 - SEVD-2022-284-04 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-284-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-284-04-EcoStruxure_Power_Operation_and_EcoStruxure_Power_SCADA.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/