Summary
Schneider Electric is aware of a vulnerability in its [ATVdPAC module](http://www.se.com/ww/en/product/VW3A3530D/atv-dpac-module/) / [ATV6000 Medium Voltage Altivar Process Drives](http://www.se.com/ww/en/product-range/65607-altivar-process-atv6000) / [ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives](http://www.se.com/ww/en/product-range/62317-altivar-process-atv600) / [ATV930/950/955/960/980/9A0/9B0/9L0 Altivar Process Drives](http://www.se.com/ww/en/product-range/63124-altivar-process-atv900) / [ATV340E Altivar Machine Drives](http://www.se.com/ww/en/product-range/63441-altivar-machine-atv340#products) /[ATS490 Altivar Soft Starter](http://www.se.com/ww/en/product-range/213421154-altivar-soft-starter-ats490) / [Altivar Process Communication Modules](http://www.se.com/ww/en/product-range/62317-altivar-process-atv600/117623851529-modular-drives-apm) product(s).
Failure to apply remediation mitigations provided below may risk Cross-Site Scripting, which could result in partial loss of confidentiality and integrity of the workstation running a Web browser.
Vulnerabilities 1
-
Medium 5.3
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that …
Revision history
-
#5.0.0
Remediations are now available for ILC992 InterLink Converter
-
#4.0.0
Remediations are now available for ATV6000 Altivar Process Drives.
-
#3.0.0
Remediations are now available for ATS490 Altivar Soft Starter.
-
#2.0.0
Remediations are now available for ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives, ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives and ATV340E Altivar Machine Drives.
-
#1.0.1
Fixed the typo on the product name Altivar Process Communication Modules.
-
#1.0.0
Original Release
References
-
Multiple Altivar Process Drives and Communication Modules - SEVD-2025-252-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/