CVE-2024-10083 — Schneider Electric / Uni-Telway driver

Description (CNA)

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated user with crafted input.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Uni-Telway driver	affected All versions
Schneider Electric / Uni-Telway driver used in EcoStruxure Control Expert	affected All versions
Schneider Electric / Uni-Telway driver used in EcoStruxure Process Expert	affected All Versions
Schneider Electric / Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform	affected All Versions
Schneider Electric / Uni-Telway driver used in OPC Factory Server	affected All Versions

CWE

CWE-20

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-02.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.