Description
CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device
inoperable when a malicious file is downloaded.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | ASCO 5310 Single-Channel Remote Annunciator | All versions | — |
| Schneider Electric | ASCO 5350 Eight Channel Remote Annunciator | All versions | — |
Advisories 3
- NCSC-2025-0056 Kwetsbaarheden verholpen in Schneider Electric ASCO NCSC-NL (Netherlands) · Feb 13, 2025
- ICSA-25-077-05 Schneider Electric ASCO 5310/5350 Remote Annunciator CISA ICS & IT advisories · Feb 11, 2025
- SEVD-2025-042-01 ASCO 5310 / 5350 Remote Annunciator Schneider Electric CPCERT · Feb 11, 2025