Description
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could
cause communications to stop when malicious packets are sent to the webserver of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | ASCO 5310 Single-Channel Remote Annunciator | All versions | — |
| Schneider Electric | ASCO 5350 Eight Channel Remote Annunciator | All versions | — |
Advisories 3
- NCSC-2025-0056 Kwetsbaarheden verholpen in Schneider Electric ASCO NCSC-NL (Netherlands) · Feb 13, 2025
- ICSA-25-077-05 Schneider Electric ASCO 5310/5350 Remote Annunciator CISA ICS & IT advisories · Feb 11, 2025
- SEVD-2025-042-01 ASCO 5310 / 5350 Remote Annunciator Schneider Electric CPCERT · Feb 11, 2025