Description
CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause
exposure of SNMP credentials when an attacker has access to the controller logs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | SpaceLogic AS-P | V5.0.3 and prior | — |
| Schneider Electric | SpaceLogic AS-B | V5.0.3 and prior | — |
Advisories 1
- SEVD-2024-163-04 SpaceLogic AS-P and AS-B Automation Servers Schneider Electric CPCERT · Jun 11, 2024