Schneider Electric System Monitor Application

Source: All CISA Advisories | Added:

The Schneider Electric System Monitor Application has a vulnerability related to improper neutralization of input during web page generation, specifically a Cross-site Scripting (XSS) issue. Successful exploitation could allow attackers to execute untrusted code, affecting various industrial PC series applications.

---

Impact: Schneider Electric System Monitor application in Harmony Industrial PC series and Pro-face Industrial PC series: All versions

In the Wild: No

Age: Newly disclosed

Remediation: Users can uninstall the System Monitor application or stop the system monitor services and implement network segmentation and firewall measures.

Read Full Original Article →