Description
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Magelis HMI Panels | all versions of HMIGTO, all versions of HMISTO, all versions of XBTGH, all versions of HMIGTU, all versions of HMIGTUX, all versions of HMISCU, all versions of HMISTU, all versions of XBTGT, all versions of HMIGXO, all versions of HMIGXU | — |
Advisories 2
- SEVD-2019-225-01 Harmony (formerly known as Magelis) HMI Panels Schneider Electric CPCERT · Jan 9, 2024
- ICSA-20-044-02 Schneider Electric Magelis HMI Panels CISA ICS & IT advisories · Feb 13, 2020