CVE-2024-12399 — Schneider Electric / Pro-face GP-Pro EX

CVE-2024-12399

Schneider Electric / Pro-face GP-Pro EX PUBLISHED

Description (CNA)

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Pro-face GP-Pro EX	affected all version before v5.00.100
Schneider Electric / Pro-face Remote HMI	affected all versions before v1.70.000

CWE

CWE-924

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-02.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.