Description
CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on
the network and potentially impacting connected devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure IT Gateway | Version 1.21.0.6, Version 1.22.0.3, Version 1.22.1.5, Version 1.23.0.4 | — |
Advisories 3
- NCSC-2024-0446 Kwetsbaarheid verholpen in Schneider Electric Ecostruxture NCSC-NL (Netherlands) · Nov 14, 2024
- ICSA-24-326-05 Schneider Electric EcoStruxure IT Gateway CISA ICS & IT advisories · Nov 12, 2024
- SEVD-2024-317-04 EcoStruxure™ IT Gateway Schneider Electric CPCERT · Nov 12, 2024