Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Design - Ecodial product.
The EcoStruxure Power Design - Ecodial product is a software that helps optimize equipment
and costs while managing operating specifications, all along with the design of power
distribution projects.
Failure to apply the provided below may risk deserialization of untrusted data, which could result
in Remote Code Execution
Vulnerabilities 1
-
High 7.8
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious…
Revision history
-
#1.0.0
Original Release
References
-
EcoStruxure Power Design - Ecodial - SEVD_2024-072-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-072-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-072-02.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/