Description
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that
could cause exposure of credentials when attacker has access to application on network over
http
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | System Monitor application in Harmony Industrial PC HMIBMO/HMIBMI/HMIPSO/HMIBMP/HMIBMU/HMIPSP/HMIPEP series | All versions | — |
| Schneider Electric | System Monitor application in Pro-face Industrial PC PS5000 series | All versions | — |
Advisories 2
- ICSA-25-030-03 Schneider Electric System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs CISA ICS & IT advisories · Oct 8, 2024
- SEVD-2024-282-07 System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs Schneider Electric CPCERT · Oct 8, 2024