EcoStruxure™ Power SCADA Operation

Schneider Electric is aware of multiple vulnerabilities in the AVEVA™ Plant SCADA product which is included as part of EcoStruxure™ Power Operation, EcoStruxure™ Power SCADA Operation products.
EcoStruxure™ Power Operation and EcoStruxure™ Power SCADA Operation are on-premises software offers that provides a single platform to monitor and control medium and lower power systems.
Failure to apply the remediations or mitigations provided below may risk escalation of privileges, which could result in an unauthenticated user being able to remotely read data, cause denial of service, and tamper with alarm states.