Summary
Schneider Electric is aware of a vulnerability in its Easergy Builder installer.
Easergy Builder is a configuration tool that supports Easergy T300, Saitel DR and Saitel DP.
This vulnerability is only exploitable during the installation process and will not impact existing installations. No remediation is required for existing installations. New installations should use the latest version of the tool. Failure to use the patched version noted below, or later, when performing a new installation of this tool, may lead to a denial of service or possible arbitrary execution of code.
Vulnerabilities 1
-
Medium 6.3
A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged …
Revision history
-
#1.0.0
Original Release
References
-
Easergy Builder - SEVD-2023-101-06 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-06.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/