Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Operation and Power SCADA Operation software
EcoStruxure™ Power Operation and EcoStructure™ Power SCADA Operation are on-premises software offers that provides a single platform to monitor and control medium and lower power systems.
Failure to apply the remediation provided below may risk loss of communications via the 61850 protocol, which could result in loss of communications to downstream devices and services.
Vulnerabilities 1
-
High 7.5
The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 1…
Revision history
-
#1.0.0
Original Release
References
-
EcoStruxure™ Power Operation 2021, EcoStruxure™ Power SCADA Operation 2020 and EcoStruxure™ Power SCADA Operation 2020 R2 - SEVD-2023-010-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-03_EcoStruxure_Power_Operation_Power_SCADA_Operation_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/