Schneider Electric Updates
1847Warning Date
Severity Level
Warning Number
Target Sector
5 December, 2021
● Low
2021-3977
All
Description:
Schneider Electric has released a security update to address several vulnerabilities in the following product:
- EcoStruxure Control Expert (formerly known as Unity Pro)
- EcoStruxure Process Expert (formerly known as EcoStruxure Hybrid Distributed Control System)
- EcoStruxure Machine Expert (formerly known as SoMachine or SoMachine Motion)
- EcoStruxure Machine Expert Basic
- EcoStruxure Operator Terminal Expert
- EcoStruxure Plant Builder
- EcoStruxure Power Design
- EcoStruxure Automation Expert
- EcoStruxure Automation Maintenance Expert
- Eurotherm Data Reviewer
- Eurotherm iTools
- eXLhoist Configuration Software
- Schneider Electric Floating License Manager
- Schneider Electric License Manager
- Harmony XB5SSoft
- SoMove
- Versatile Software BLUE
- Vijeo Designer
- OsiSense XX Configuration Software
- Zelio Soft 2
- EcoStruxure Augmented Operator Advisor
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Information disclosure
Best practice and Recommendations:
The CERT team encourages users to apply the necessary updates, SESU will indicate a security update is available