Skip to content
OpenAdvisories
High SEVD-2026-286-01 0 CVEs

Use of Unmaintained Third-Party Components vulnerability on Pro-face STW6000 and Harmony STW6

Published Oct 13, 2026 · Updated Oct 13, 2026

Summary

Schneider Electric is aware of multiple vulnerabilities in its Pro-face STW6000 and Harmony STW6 products. The Pro-face STW6000 and Harmony STW6 products are Basic Web HMI panels belongs to the Schneider Electric Harmony ST6 and Pro-face ST6000 range and is designed to meet the needs of simple machine operators for good visualization, connectivity, and cost-effective equipment. Failure to apply the mitigations provided below may risk various attack scenarios due to Third-party component obsolescence, which could result in unauthorized control to the device and operational failures.

Revision history

  1. #1.0.0

    Original Release

References