Description
CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure
of data when network traffic is being sniffed by an attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | ASCO 5310 Single-Channel Remote Annunciator | All versions | — |
| Schneider Electric | ASCO 5350 Eight Channel Remote Annunciator | All versions | — |
Advisories 3
- NCSC-2025-0056 Kwetsbaarheden verholpen in Schneider Electric ASCO NCSC-NL (Netherlands) · Feb 13, 2025
- ICSA-25-077-05 Schneider Electric ASCO 5310/5350 Remote Annunciator CISA ICS & IT advisories · Feb 11, 2025
- SEVD-2025-042-01 ASCO 5310 / 5350 Remote Annunciator Schneider Electric CPCERT · Feb 11, 2025