Summary
Schneider Electric is aware of a vulnerability in our Easergy Studio product.
The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices.
Failure to apply the remediations provided below may risk an attacker with a user level account on the engineering workstation to escalate privileges which could result in an attacker gaining full control of the targeted workstation
Vulnerabilities 1
-
High 7.8
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user le…
Revision history
-
#1
Original Release
References
-
Easergy Studio - SEVD-2024-009-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-009-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-009-02.pdf
-
Recommended Cybersecurity Best Practices
https://download.schneider-electric.com/files?p_Doc_Ref=7EN52-0390&p_enDocType=White+Paper&p_File_Name=Cybersecurity_Best+Practices_EN.pdf