Skip to content
OpenAdvisories
High · 7.1 CVE-2024-12399 EUVD-2024-50824GHSA-5q3j-g5r8-6rfg

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause par…

Published Jan 17, 2025 · Updated Sep 9, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Pro-face GP-Pro EX Product: Pro-face Remote HMI Category: ICS / OT

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability
exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs
man in the middle attack by intercepting the communication.

Affected products

VendorProductAffectedFixed
Schneider Electric Pro-face GP-Pro EX all version – < v5.00.100 v5.00.100
Schneider Electric Pro-face Remote HMI all versions – < v1.70.000 v1.70.000

Advisories 2

References