Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5391US | critical9.8 | — | ||
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to
execute arbitrary code on the targeted system by sending a specifically crafted… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-290-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-290-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationEcoStruxure Power Monitoring Expert
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationEcoStruxure Power Operation with Advanced Reports
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationEcoStruxure Power SCADA Operation with Advanced Reports
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan