Schneider Electric PowerLogic P7
Schneider Electric has identified and addressed vulnerabilities within its PowerLogic™ P7 protection and control platform. Specifically, the product is susceptible to CWE-476 (NULL Pointer Dereference), CWE-78 (Improper Neutralization of Special Elements used in an OS Command), and CWE-617 (Reachable Assertion) vulnerabilities, potentially allowing unauthorized command execution and denial-of-service attacks. Schneider Electric released firmware version V02.004.001 to remediate these issues, alongside recommended mitigations including network access restrictions and monitoring.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data