A CWE-754 – Improper Check for Unusual or Exceptional Conditions...

0 CVSS

Vulnerability Description

A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6833

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Schneider Electric SE

View All →

CVE-2019-6857

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability...

Unknown 0

CVE-2019-6856

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability...

Unknown 0

CVE-2019-6840

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001...

Critical 9.8

CVE-2019-6835

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server...

Medium 5.4

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before...

High 8.3

Affected Vendor

Schneider Electric SE

View all reports →

Affected Software

Magelis HMI Panels

Vulnerable Versions:

all versions of HMIGTO, all versions of HMISTO, all versions of XBTGH, all versions of HMIGTU, all versions of HMIGTUX, all versions of HMISCU, all versions of HMISTU, all versions of XBTGT, all versions of HMIGXO, all versions of HMIGXU