The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CSchneider Electric Magelis Xbt Hmi
HWSchneider-Electricall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2018-7841CRITICAL9.8⚠ KEVPL ✓same vendor
SQL Injection z RCE w Schneider Electric U.Motion Builder 1.3.4
CVE-2024-10575CRITICAL10.0PL ✓same vendor
Brak autoryzacji w Schneider Electric EcoStruxure IT Gateway (CVSS 10.0)
CVE-2024-6407CRITICAL9.8PL ✓same vendor
Ujawnienie poświadczeń w urządzeniu Schneider Electric WHC-5918A
CVE-2024-37036CRITICAL9.8PL ✓same vendor
Out-of-bounds Write umożliwiający Auth Bypass w Schneider Electric Sage RTU
CVE-2023-5399CRITICAL9.8PL ✓same vendor
Path Traversal w Schneider Electric Spacelogic C-Bus Toolkit