The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CSchneider Electric Magelis Xbt Hmi
HWSchneider-Electricwszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2018-7841CRITICAL9.8⚠ KEVten sam vendor
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unw...
CVE-2024-10575CRITICAL10.0PL ✓ten sam vendor
Brak autoryzacji w Schneider Electric EcoStruxure IT Gateway (CVSS 10.0)
CVE-2024-6407CRITICAL9.8PL ✓ten sam vendor
Ujawnienie poświadczeń w urządzeniu Schneider Electric WHC-5918A
CVE-2024-37036CRITICAL9.8PL ✓ten sam vendor
Out-of-bounds Write umożliwiający Auth Bypass w Schneider Electric Sage RTU
CVE-2023-5399CRITICAL9.8ten sam vendor
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ex...