Summary
Schneider Electric is aware of multiple vulnerabilities in its Pro-face STW6000 and Harmony STW6 products. The Pro-face STW6000 and Harmony STW6 products are Basic Web HMI panels belongs to the Schneider Electric Harmony ST6 and Pro-face ST6000 range and is designed to meet the needs of simple machine operators for good visualization, connectivity, and cost-effective equipment. Failure to apply the mitigations provided below may risk various attack scenarios due to Third-party component obsolescence, which could result in unauthorized control to the device and operational failures.
Revision history
-
#1.0.0
Original Release
References
-
Use of Unmaintained Third-Party Components vulnerability on Pro-face STW6000 and Harmony STW6 - SEVD-2026-286-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-286-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-286-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/