Schneider Electric System Monitor Application
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iPCs which incorporate slim, flexible and durable design allowing each customer to configure their iPC based on their individual application needs. These products offer flexible connectivity to a range of devices and designs. Failure to apply the remediations provided below may risk untrusted code execution which could result in operational failures.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11023US | medium6.1OT critical | KEV | ||
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's… | ||||
references
External citations — patches, advisories, analysis.
- System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs - SEVD-2025-189-02 CSAF Versionself
- System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs - SEVD-2025-189-02 PDF Versionself
- GitHub Advisoryexternal
- ICS Advisory ICSA-25-203-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-203-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSchneider Electric System Monitor application installed on Schneider Electric Harmony Industrial PC All Versions
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Stop the system monitor if not required by turning off the services as specified in user guide: o Harmony Industrial PC Series User Manual • Setup network segmentation and implement a firewall to block all unauthorized access to configured HTTP/HTTPS ports.
https://www.se.com/ww/en/download/document/EIO0000002042/ - MitigationSchneider Electric System Monitor application installed on Schneider Electric Pro-face Industrial PC All Versions
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Stop the system monitor if not required by turning off the services as specified in user guide: o Pro-face PS5000 legacy industrial PC Series User Manual • Setup network segmentation and implement a firewall to block all unauthorized access to configured HTTP/HTTPS ports.
https://www.proface.com/en/node/39458 - FixedSchneider Electric System Monitor application installed on Schneider Electric Harmony Industrial PC All Versions
Customer can uninstall System Monitor application using installer available for download here: https://www.se.com/ww/en/product-range/61054- harmony-industrial-pc/#software-and-firmware Please follow the steps described in the guideline attached as a .pdf in the downloaded uninstaller guide.
https://www.se.com/ww/en/product-range/61054-harmony-industrial-pc/#software-and-firmware - FixedSchneider Electric System Monitor application installed on Schneider Electric Pro-face Industrial PC All Versions
Customer can uninstall System Monitor application using installer available for download here: https://www.proface.com/en/product/ipc/ps5000/download Please follow the steps described in the guideline attached as a .pdf in the downloaded uninstaller guide.
https://www.proface.com/en/product/ipc/ps5000/download
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan