Summary
Schneider Electric is aware of a vulnerability in its Pro-face GP-Pro EX product.
The Pro-face GP-Pro EX product is an HMI Screen Editor & Logic Programming Software.
The affected module is WinGP, which is the HMI runtime that enable HMI project execution on a Windows platform.
Failure to apply the remediations provided below may risk memory corruption on the system running WinGP which could result in limited impact on confidentiality, integrity, and availability of the HMI.
Vulnerabilities 1
-
Medium 5.3
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…
Revision history
-
#1.0.0
Original Release
References
-
Pro-face GP-Pro EX - SEVD-2023-220-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/