Description
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak
information and potential privilege escalation following man in the middle attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | ConneXium Network Manager | Version V2.0.01 | — |
Advisories 2
- SEVD-2025-098-01 ConneXium Network Manager Software Schneider Electric CPCERT · May 13, 2025
- ICSA-25-107-03 Schneider Electric ConneXium Network Manager Software CISA ICS & IT advisories · Apr 8, 2025