Summary
Schneider Electric is aware of a vulnerability in its Harmony Relay NFC products.
The Harmony Control Relay and Harmony Timer Relay products are 8A multifunction 3-phase
control and modular timing relays.
Failure to apply the mitigations provided below may risk an authentication bypass attack, which
could result in unauthorized tampering/modification of the device configuration.
Vulnerabilities 1
-
High 8.8
CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration o…
Revision history
-
#1.0.0
Original Release
References
-
Harmony Relay NFC - SEVD-2024-044-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-02.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/