Description (CNA)
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric SE / Magelis HMI Panels | affected all versions of HMIGTO; affected all versions of HMISTO; affected all versions of XBTGH; affected all versions of HMIGTU; affected all versions of HMIGTUX; affected all versions of HMISCU; affected all versions of HMISTU; affected all versions of XBTGT; affected all versions of HMIGXO; affected all versions of HMIGXU |
CWE
CWE-754
References
- https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-225-01
- https://security.cse.iitk.ac.in/responsible-disclosure
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.