Summary: Original Release

Summary: CODESYS V2 Vulnerabilities in Programmable Automation Controller (PacDrive) M - SEVD-2021-222-06 PDF Version

Summary: CODESYS V2 Vulnerabilities in Programmable Automation Controller (PacDrive) M - SEVD-2021-222-06 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V2 runtime for industrial control systems, which is used in its Programmable Automation Controller (PacDrive) M products.
The Programmable Automation Controller (PacDrive) M products are legacy logic motion technology for packaging and production machines.
Failure to apply the mitigations provided below may risk buffer overflow attacks, which could result in potential denial of service condition or arbitrary remote code execution.

Overview

Schneider Electric Programmable Automation Controller (PacDrive) M All versions

CVE-2021-30186

A crafted request may cause a heap-based buffer overflow in the affected CODESYS products, resulting in a denial-of-service condition.

CVE Description

The Programmable Automation Controller (PacDrive) M product has been replaced with the newer PacDrive 3 product. Customers should consider migrating to the PacDrive 3 and following the steps below to resolve these issues:
1. Migrate to PacDrive 3 controllers: https://www.se.com/ww/en/product-range/7590-pacdrive-3/?subNodeId=12367561635en_WW. Please contact your local Schneider Electric technical support for more information.
2. Download and install latest EcoStruxure Machine Expert software available here: https://www.se.com/ww/en/product-range/2226-ecostruxure-machine-expert-%28somachine%29/ to program PacDrive 3 controllers.
3. Upgrade to the latest firmware versions of PacDrive 3 controllers through Schneider Electric Software Update (SESU) Note: a reboot of the controller will be required.

If customers choose not to migrate to the most recent controllers, they should immediately apply the following mitigation to reduce the risk of exploit:
• Restrict network access to the controller via network segmentation and network access controls

CVE-2021-30188

A crafted request may cause a stack-based buffer overflow in the affected CODESYS products, resulting in a denial-of-service condition or being utilized for remote code execution.

CVE Description

CVE-2021-30195

A crafted request may cause a buffer over-read in the affected CODESYS products, resulting in a denial-of service condition.

CVE Description


Summary: Orignal Release

Summary: EcoStruxure™ Control Expert V15.1 and EcoStruxure™ Process Expert 2021 include a fix for these vulnerabilities

Summary: A release is available for SCADAPack RemoteConnect™ R2.7.3 that addresses this vulnerability.

Summary: EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 - SEVD-2021-057-01 CSAF Version

Summary: EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, SCADAPack RemoteConnect™ for x70 - SEVD-2021-057-01 PDF Version

Public

We strongly recommend the following industry cybersecurity best practices.

https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.

We provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.

We are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.

www.se.com

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, EcoStruxure™ Process Expert, SCADAPack RemoteConnect™ for x70 software products.
EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon M340, M580, M580S, Premium, Momentum and Quantum ranges.
EcoStruxure™ Process Expert is the next-generation process automation system to engineer, operate and maintain an entire plant, a Distributed Control System (DCS), designed especially for water, mining, cement, power generation, consumer packaged goods, chemical, and oil and gas applications.
The SCADAPack RemoteConnect™ for x70 product is a Windows-based application based on EcoStruxure™ Control Expert software components that provides a programming and configuration environment for the SCADAPack x70 RTU series, which is comprised of the SCADAPack 470, 474, 570, 574 and 575 Smart RTUs.
Failure to apply the remediations provided below may risk a Denial of Service attack, which could cause a disruption of communication between the Modicon controller and the engineering software.

June 2022 Update: Added SCADAPack RemoteConnect™ to the list of affected products, which is impacted on versions prior to R2.7.3 through the integration of EcoStruxure™ Control Expert.

Overview

Schneider Electric

EcoStruxure™ Control Expert

<=V15.0 SP1

Schneider Electric EcoStruxure™ Control Expert version V15.0 SP1 and prior

Schneider Electric EcoStruxure™ Control Expert V15.1

EcoStruxure™ Process Expert

Schneider Electric EcoStruxure™ Process Expert version V2021 and prior

Schneider Electric EcoStruxure™ Process Expert version 2021 and later

SCADAPack RemoteConnect™ for x70

Schneider Electric SCADAPack RemoteConnect™ for x70 versions prior to R2.7.3

Schneider Electric SCADAPack RemoteConnect™ for x70 R2.7.3

CVE-2021-22797

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software.

CVE Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

V15.1 and prior of EcoStruxure™ Control Expert includes a fix for these vulnerabilities and is available for download here:
https://www.se.com/ww/en/download/document/EcoStruxureControlExpert_V15.1/

V2021 and prior of EcoStruxure™ Process Expert includes a fix for these vulnerabilities and is available for download here:
https://www.se.com/myschneider/documentsDownloadCenterDetail/in/en/EPE2021Release
It is recommended to first read the ReadMe in its entirety before proceeding with the software installation.

Version R2.7.3 and prior of SCADAPack RemoteConnect includes a fix for this vulnerability and is available for download here:
RemoteConnect for the SCADAPack x70 | Schneider Electric Exchange Marketplace (se.com)
Note: Users no longer need to update the RemoteConnect application when there is a Control Expert update
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
• Store project files in a secure storage and limit access to the files. Restrict the access to the files to only trusted users
• When exchanging the files over the network, use secure communication protocols
• Harden your workstation running SCADAPack RemoteConnect™ for the 70x
• Compute a checksum on your project files and check the consistency of this checksum to verify the integrity before usage
• Start the software without administrator rights, to prevent from copying extracted files in critical system folders


Summary: Original Release

Summary: A remediation is available for Modicon M340 X80 Ethernet Communication ModulesBMXNOR0200H RTU and BMXNOC0401.

Summary: A remediation is available for Modicon M340 Ethernet Communication Modules BMXNOE0100 (H) and BMXNOE0110 (H)

Summary: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Premium and Associated Communication Modules - SEVD-2021-257-02 PDF Version

Summary: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Premium and Associated Communication Modules - SEVD-2021-257-02 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in the web server component of the Modicon M340 PLC. In addition, the Modicon Quantum and Modicon Premium Legacy offers, and associated communication modules are affected. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. Failure to apply the remediations provided below may risk an attack via the web server, which could result in disclosure of sensitive information or denial of service of the controller.
September 2022 Update: A remediation is available for Modicon M340 X80 Ethernet Communication Modules BMXNOR0200H RTU (page 3) and BMXNOC0401 (page 4)

Overview

Schneider Electric

Modicon M340 CPUs BMXP34*

Schneider Electric Modicon M340 CPUs BMXP34* versions prior to V3.40

Firmware V3.40

Schneider Electric Modicon M340 CPUs BMXP34*  Firmware V3.400

Modicon M340 X80 Ethernet Communication module BMXNOE0100 (H)

Schneider Electric Modicon M340 X80 Ethernet Communication modules BMXNOE0100 (H) versions prior to SV03.50

Schneider Electric Modicon M340 X80 Ethernet Communication modules BMXNOE0100 (H) SV03.50

Modicon M340 X80 Ethernet Communication module BMXNOE0110 (H)

Schneider Electric Modicon M340 X80 Ethernet Communication modules BMXNOE0110 (H) versions prior to SV06.70

Schneider Electric Modicon M340 X80 Ethernet Communication modules BMXNOE0110 (H) SV06.70

Schneider Electric Modicon M340 X80 Ethernet Communication modules BMXNOC0401 prior to V2.11

Schneider Electric Modicon M340 X80 Ethernet Communication module BMXNOC0401 V2.11

Schneider Electric Modicon Premium processors with integrated Ethernet COPRO TSXP574634 all versions

Schneider Electric Modicon Premium processors with integrated Ethernet COPRO TSXP575634 all versions

Schneider Electric Modicon Premium processors with integrated Ethernet COPRO TSXP576634 all versions

Schneider Electric Modicon Quantum processors with integrated Ethernet COPRO 140CPU65xxxxx all versions

Schneider Electric Modicon Quantum communication modules 140NOE771x1 all versions

Schneider Electric Modicon Quantum communication modules 140NOC78x00 all versions

Schneider Electric Modicon Quantum communication modules 140NOC77101 all versions

Schneider Electric Modicon Premium communication modules TSXETY4103 all versions

Schneider Electric Modicon Premium communication modules TSXETY5103 all versions

<V1.7 IR24

Modicon M340 X80 Ethernet Communication Modules BMXNOR0200H RTU versions prior to V1.7 IR24

V1.70 IR24

Modicon M340 X80 Ethernet Communication Modules BMXNOR0200H RTU V1.70 IR24

Exposure of Sensitive Information to an Unauthorized Actor

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device

V3.40 includes a fix for these vulnerabilities and is available for download here:https://www.se.com/ww/en/download/document/BMXP34xxxxx_SV_xx.xx/

V1.70 IR24 includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/download/document/BMXNOR0200H_FW/Note: V1.70 IR23 previously included a fix for CVE-2021-22785 If customers choose not to apply the recommended fixes then they should apply the mitigations below to reduce the risk of the exploit: •Setup network segmentation and implement a firewall to block all unauthorized access to port 80/HTTP (Note HTTP is disabled by default). •Configure the Access Control List following the recommendations of the user manual “Modicon M340 for Ethernet Communications Modules and Processors User Manual” in chapter “Messaging Configuration Parameters”: https://www.se.com/ww/en/download/document/31007131K01000/•Setup a VPN between the Modicon PLC impacted modules and the engineering workstation containing EcoStruxure Control Expert or Process Expert.

Version SV03.50of BMXNOE0100 (H) includes a fix for thesevulnerabilities and is available for download here: https://www.se.com/ww/en/download/document/BMXNOE0100_SV_03.50/

Version SV06.70 of BMXNOE0110 (H) includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/download/document/BMXNOE0110_SV_06.70/

If customers choose not to apply the remediation, then they should immediately apply the following mitigations to reduce the risk of exploit: •Setup network segmentation and implement a firewall to block all unauthorized access to port 80/HTTP (Note HTTP is disabled by default). •Configure the Access Control List following the recommendations of the user manual “Modicon M340 for Ethernet Communications Modules and Processors User Manual” in chapter “Messaging Configuration Parameters”: https://www.se.com/ww/en/download/document/31007131K01000/•Setup a VPN between the Modicon PLC impacted modules and the engineering workstation containing EcoStruxure Control Expertor Process Expert.

BMXNOC0401 V2.11 is available for download that has a fix of the reported vulnerabilities: https://www.se.com/ww/en/product/BMXNOC0401/ethernet-tcp-ip-network-module-modicon-m340-automation-platform-4-x-rj45-10-100/If customers choose not to apply the fix, then, they should immediately apply the following mitigations to reduce the risk of exploit: •Setup network segmentation and implement a firewall to block all unauthorized access to port 80/HTTP•Setup a VPN between the Modicon PLC impacted modules and the engineering workstation containing EcoStruxure Control Expert or Process Expert

Modicon Quantum and Associated Communication Modules:Schneider Electric’s Modicon Quantum controllers have reached their end of life and are no longer commercially available. They have been replaced by the Modicon M580 ePAC controller, our most current product offer. Customers should strongly consider migrating to the Modicon M580 ePAC. Please contact your local Schneider Electric technical support for more information.To mitigate the risks, users should immediately:•   Disable the Web server using 'Web Access (HTTP)' via UnityPro / EcoStruxure Control Expert using the following guideline “ Quantum using EcoStruxure™ Control Expert - TCP/IP Configuration, User Manual” in the chapter “Security (Enable / Disable HTTP, FTP, and TFTP)”:https://www.se.com/ww/en/download/document/33002479K01000

Modicon Premium and Associated Communication Modules:Schneider Electric’s Modicon Premium controllers have reached their end of life and are no longer commercially available. They have been replaced by the Modicon M580 ePAC controller, our most current product offer. Customers should strongly consider migrating to the Modicon M580 ePAC. Please contact your local Schneider Electric technical support for more information.To mitigate the risks, users should immediately:•Disable the Web server using 'Web Access (HTTP)' via UnityPro / EcoStruxure Control Expert using the following guideline “Premium and Atrium using EcoStruxure™ Control Expert -  Ethernet Network Modules, User Manual” in the chapter “Security Service Configuration Parameters / Security (Enable / Disable HTTP, FTP, and TFTP)”: https://www.se.com/ww/en/download/document/35006192K01000For further information, please check the “Premium and Atrium using EcoStruxure™ Control Expert - Ethernet Network Modules, User Manual” and the Modicon Controllers Platform Cyber Security Reference Manual

A CWE-787: Out-of-bounds Writevulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device.

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device.


StruxureWare Data Center Expert

Summary: Original Release

Summary: StruxureWare Data Center Expert - SEVD-2021-257-03 PDF Version

Summary: StruxureWare Data Center Expert - SEVD-2021-257-03 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert product.
StruxureWare Data Center Expert provides an efficient way for organizations to monitor and manage their company-wide multi-vendor physical infrastructure; power, cooling, security and environment.
Failure to apply the mitigations provided below may risk remote code execution, which could result in downtime or outage.

Overview

Schneider Electric

StruxureWare Data Center Expert

Schneider Electric StruxureWare Data Center Expert 7.8.1 and prior.

CVE-2021-22794

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution.

CVE Description

Schneider Electric has established a remediation plan for future versions of StruxureWare Data Center Expert that will include a fix for these vulnerabilities. We will update this document when the remediation is available. Until then, customers should immediately follow security hardening guidelines found in https://dcimsupport.ecostruxureit.com/hc/en-us/articles/360039289633-Data-Center-Expert-Security-Handbook to reduce the risk of exploit.

CVE-2021-22795

A CWE-78:Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network.

CVE Description


spaceLYnk, Wiser For KNX, fellerLYnk

Summary: Original Release

Summary: spaceLYnk, Wiser For KNX, fellerLYnk - SEVD-2021-285-01 PDF Version

Summary: spaceLYnk, Wiser For KNX, fellerLYnk - SEVD-2021-285-01 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility and simplifies building management.
Wiser for KNX products are personalized energy efficiency solutions, offering a complete system based on open protocols: KNX, Modbus, BACnet and IP.
fellerLYnk offers more flexibility in visualization and trend recording as well as functions such as presence simulation or time switches that the end customer can easily manage.
Failure to apply the remediations provided below may risk a cross-origin resource sharing attack, which could result in exfiltrated data and unauthorized access.

Overview

Schneider Electric

spaceLYnk

Schneider Electric spaceLYnk V2.6.1 and prior

Wiser for KNX

Schneider Electric Wiser for KNX V2.6.1 and prior

fellerLYnk

Schneider Electric fellerLYnk V2.6.1 and prior

CVE-2021-22806

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website.

CVE Description

Version 2.6.2 of the spaceLYnk product includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/LSS100200/spacelynk-logic-controller/
A reboot is needed after installation.

Version 2.6.2 of the Wiser for KNX product includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/LSS100100/wiser-for-knx-logic-controller/
A reboot is needed after installation.

Version 2.6.2 of the fellerLYnk product includes a fix for this vulnerability and is available for download here:
https://online-katalog.feller.ch/download/index.php?menueidLev1=279&menueidLev2=662&menueidLev3=664&sc_lang=de
A reboot is needed after installation.

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
• The spaceLYnk, Wiser For KNX, fellerLYnk products should only be used in your personal home network
• The spaceLYnk, Wiser For KNX, fellerLYnk products should not have a publicly accessible IP address
• Do NOT use port forwarding to access these products from the public internet.
• These products should be on their own network segment. If your router supports a guest
network or VLAN, it is preferable to locate the controller there
• Use the strongest Wi-Fi encryption available
• Use HTTPs in local network
• Only visit trusted websites


Summary: Original Release

Summary: ConneXium Network Manager (CNM) Software - SEVD-2021-285-02 PDF Version

Summary: ConneXium Network Manager (CNM) Software - SEVD-2021-285-02 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its ConneXium Network Manager (CNM) software.
The ConneXium Network Manager (CNM) is a software which allows users to configure one or more Ethernet devices with a few button clicks, reducing the need to log into each device independently.
Failure to apply the mitigations provided below may lead to unauthorized access to configuration settings, which could result in arbitrary code execution on the CNM workstation.

Overview

Schneider Electric

Schneider Electric ConneXium Network Manager (Ethernet network management software) all versions

CNM Alarms Disabler Tool

Schneider Electric CNM Alarms Disabler Tool 1.0

CVE-2021-22801

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions.

CVE Description

Customers can protect their installation with the following:
• STEP 1: Download and run the CNM Alarms Disabler Tool here: https://www.se.com/us/en/download/document/CNM_Alarms_Disabler_Tool/
Usage:
Place the disabler tool and the .cxn project file in the same directory.
In a shell prompt, and in the chosen directory, execute the following command:
disabler -projectfile {source project filename} -resultfile {converted project filename}
Important: The converter secures and modifies the CNM database and store it in a new project file. Before a database coming from an untrusted source is loaded into CNM, customers must run the converter. Note that the original database is not modified. So if the original database needs to be loaded once more, it must be converted first.
STEP 2: Set up the “Edit Password” in the CNM software (https://www.se.com/ww/en/product-range/61527-connexium-network-manager/#software-and-firmware). The “Edit Mode” is enabled by default. Customers must activate the edit protection by switching to “Run mode” before exiting the application. Please refer to the chapter “Edit Mode” of the user manual.

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
• Harden the workstation running ConneXium Network Manager (CNM) Software.
• Do not load .cxn files received from untrusted sources.
• Use session without administrator rights when it is not necessary


Summary: Original Release

Summary: IGSS (Interactive Graphical SCADA System) - SEVD-2021-285-03 PDF Version

Summary: IGSS (Interactive Graphical SCADA System) - SEVD-2021-285-03 CSAF Version

Public

We strongly recommend the following industry cybersecurity best practices.

https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.

We provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.

We are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.

www.se.com

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in its Data Collector module for IGSS (Interactive Graphical SCADA System) product.
The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major industry standard PLC drivers.
Failure to apply the remediations provided below may risk remote code execution, which in worst case could result in an attacker gaining access to the Windows Operating System on the machine running IGSS in production.

Overview

Schneider Electric

IGSS Data Collector (dc.exe)

Schneider Electric IGSS Data Collector (dc.exe) V15.0.0.21243 and prior

Schneider Electric IGSS Data Collector (dc.exe) 15.0.0.21244

CVE-2021-22802

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network.

CVE Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Version 15.0.0.21244 of the IGSS DC module: dc.exe includes fixes for these vulnerabilities and is available for download through IGSS Master > Update IGSS Software or here:

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
• Only accept incoming connections from machines, which name have been added as a Station in the IGSS System Configuration module by setting the registry key called “MatchWinName” to 1 under: “HKEY_CURRENT_USER\SOFTWARE\Schneider Electric\IGSS32\V15.00.00\DC_HKLM\”
• Follow the general security recommendation below and verify that devices are isolated on a private network and that firewalls are configured with strict boundaries for devices that require remote access

CVE-2021-22803

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network.

CVE Description

CVE-2021-22804

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages.

CVE Description

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages.

CVE Description


Modicon M218 Logic Controller

Summary: Original Release

Summary: Modicon M218 Logic Controller - SEVD-2021-285-04 PDF Version

Summary: Modicon M218 Logic Controller - SEVD-2021-285-04 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its Modicon M218 Logic Controller product.
The Modicon M218 Logic Controller is a programmable controller providing an optimized solution to repetitive machines based on high speed counting and simple positioning features.
Failure to apply the remediation provided below may risk denial of service of the controller, when specifically crafted packets are sent to the Modicon M218 controller.

Overview

Schneider Electric

Modicon M218 logic controller

Schneider Electric Modicon M218 logic controller v5.1.0.6 and prior

Schneider Electric Modicon M218 logic controller 5.1.0.8

CVE-2021-22800

A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP.

CVE Description

Version 5.1.0.8 of the Modicon M218 logic controller product includes a fix for this vulnerability.
• On the engineering workstation, update to EcoStruxure Machine Expert v2.0.1 or above:
https://www.se.com/ww/en/product-range-download/2226-ecostruxure-machine-expert-%28somachine%29/?selected-node-id=14435955187#/software-firmware-tab
• On Modicon M218 logic controller, update to latest firmware version available within EcoStruxure Machine Expert v2.0.1 or above. A reboot of the controller is needed

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
• Setup network segmentation and implement a firewall to block all unauthorized access to port 1105/TCP on the Modicon M218 controller.


Conext™ Advisor & Conext™ Control V2

Summary: Original Release

Summary: Conext™ Advisor & Conext™ Control V2 - SEVD-2021-285-05 PDF Version

Summary: Conext™ Advisor & Conext™ Control V2 - SEVD-2021-285-05 CSAF Version

Summary: Recommended Cybersecurity Best Practices

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of multiple Microsoft Windows vulnerabilities in its Schneider Conext™ Advisor 2 & Conext™ Control V2 products.
The Conext™ Advisor 2 is a web portal with an efficient, task-oriented interface for managing and optimizing the performance of solar power plants and includes a complete suite of tools for professional users.
The Conext™ Control V2 is a Solar Power Plant monitoring solution.
Failure to apply the remediations provided below may risk remote code execution, which could result in undesired behavior within the operating system. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system and then install programs; view, change, or delete data; or create new accounts with full user rights.

Overview

Schneider Electric

Conext™ Advisor 2 Cloud

Schneider Electric Conext™ Advisor 2 Cloud 2.02 and below

Conext™ Advisor 2 Gateway

Schneider Electric Conext™ Advisor 2 Gateway 1.28.45 and below

Conext™ Control V2 Gateway

Schneider Electric Conext™ Control V2 Gateway 2.6 and below

CVE-2019-11135

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

CVE Description

Version Windows 10 of the Microsoft Windows includes a fix for this vulnerability and is available for download here:
• https://www.microsoft.com/en-in/software-download/windows10
• Reboot is required

CVE-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.

CVE Description

CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

CVE Description

CVE-2020-0610

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

CVE Description

CVE-2020-0796

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

CVE Description

CVE-2020-0938

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.

CVE Description

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.

CVE Description

CVE-2020-1350

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

CVE Description

CVE-2020-1472

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon Elevation of Privilege Vulnerability'.

CVE Description

CVE-2019-0803

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.

CVE Description

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.

CVE Description


SCADAPack 300E Series RTU

Summary: Original Release

Summary: SCADAPack 300E Series RTU - SEVD-2021-313-01 PDF Version

Summary: SCADAPack 300E Series RTU - SEVD-2021-313-01 CSAF Version

Public

We strongly recommend the following industry cybersecurity best practices.

https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.

We provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.

We are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.

www.se.com

About Schneider Electric

Schneider Electric is aware of a vulnerability in its SCADAPack 300E Series RTU products.
The SCADAPack 300E Series RTUs are a range of compact Smart RTU which control and monitor remote assets.
Failure to apply the remediation or mitigations provided below may risk a Denial of Service (DoS) attack, which could result in a forced restart to restore availability.

Overview

Schneider Electric

SCADAPack 300E Series RTUs

Schneider Electric SCADAPack 300E Series RTUs firmware V8.18.1 and prior

Schneider Electric SCADAPack 300E Series RTUs 8.19.1

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server.

CVE Description

Firmware Version 8.19.1 of the SCADAPack 300E Series RTU product includes a fix for this vulnerability and is available for download here:
https://shop.exchange.se.com/en-US/apps/62865/scadapack-e-workbench-and-utilities
A reboot is required when upgrading to new firmware.
To verify the remediation is in place, use SCADAPack E Configurator or the RTU command line to display the firmware version.
Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance removing a patch.

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
• Update rules for firewall or Modbus/TCP security appliance to:
o Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP
o Block invalid traffic to the RTU
o Limit the data rate of packets delivered to the RTU


Schneider Electric Software Update

Summary: Original Release

Summary: Schneider Electric Software Update - SEVD-2021-313-02 PDF Version

Summary: Schneider Electric Software Update - SEVD-2021-313-02 CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its Schneider Electric Software Update product (also referred to as “SESU”), which is used to notify and download updates for other Schneider Electric Software products.
To connect to the Internet, the SESU product offers users to manually configure the proxy settings. Due to an improper protection of the saved credentials, it is potentially possible for an attacker to decrypt these credentials.

Overview

Schneider Electric

Schneider Electric Software Update,

Schneider Electric Schneider Electric Software Update, V2.3.0 through V2.5.1

EcoStruxure Control Expert (formerly known as Unity Pro)

EcoStruxure Process Expert (formerly known as EcoStruxure Hybrid Distributed Control System)

EcoStruxure Machine Expert (formerly known as SoMachine or SoMachine Motion)

EcoStruxure Automation Maintenance Expert

Schneider Electric Floating License Manager

Schneider Electric Schneider Electric Software Update, 2.5.2

CVE-2021-22799

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry.

CVE Description

The version V2.5.2 of the SESU product includes a fix for this vulnerability and is available for download here:
https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
Note: This link will always be updated to point to the latest version of SESU
If you have already installed SESU and activated notification of updates, it will show that a new security patch is available for installation. To install the security update, which is strongly recommended, download and execute the setup file. However, as long as versions 2.3.0 - 2.5.1 of SESU are installed and configured to use a manually defined proxy server with credentials, make sure only authorized users, which are allowed to see them, have access to this machine. If this cannot be guaranteed, make sure no proxy credentials are stored.


APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices

Summary: Original Release

Summary: Remediations added for remaining affected products: APC Power Distribution products, Cooling products, Environmental Monitoring products, and Battery Management products.

Summary: APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices - SEVD-2021-313-03 CSAF Version

Summary: APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices  - SEVD-2021-313-03 PDF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in its products that use the Network Management Card 2 (NMC2), Network Management Card 3 (NMC3), and the NMC embedded devices.
The NMC2 and the NMC3 cards and embedded devices allow for secure monitoring and control of APC by Schneider Electric products.
Failure to apply the mitigations provided below may risk potential data disclosure or cross-site scripting which could result in execution of malicious web code or loss of device functionality.

Overview

Schneider Electric

1-Phase Uninterruptible Power Supply (UPS) using NMC2

Smart-UPS

Network Management Card 2 AOS

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS version 6.9.8 and prior

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS version 7.0.4 and later

Symmetra

Network Management Card 2 AOS

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra Network Management Card 2 AOS version 6.9.8 and prior

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra Network Management Card 2 AOS version 7.0.4 and later

Galaxy 3500

Network Management Card 2 AOS

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 Network Management Card 2 AOS version 6.9.8 and prior

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 Network Management Card 2 AOS version 7.0.4 and later

3-Phase Uninterruptible Power Supply (UPS) using NMC2

Symmetra PX 250 (SYPX)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 250 (SYPX) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 250 (SYPX) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 500 (SYPX)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 500 (SYPX) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 500 (SYPX) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 48 kW UPS (PX2)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 48 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 48 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 96 kW UPS (PX2)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 96 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 96 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 100 kW UPS (PX2)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 100 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 100 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 160 kW UPS (PX2)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 160 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 160 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 20 kW UPS (SY3P)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 20 kW UPS (SY3P) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 20 kW UPS (SY3P) Network Management Card 2 AOS version 7.0.4 and later

Symmetra PX 40 kW UPS (SY3P)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 40 kW UPS (SY3P) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 40 kW UPS (SY3P) Network Management Card 2 AOS version 7.0.4 and later

Gutor (SXW, GVX)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Gutor (SXW, GVX) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Gutor (SXW, GVX) Network Management Card 2 AOS version 7.0.4 and later

Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU)

Network Management Card 2 AOS

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) Network Management Card 2 AOS version 6.9.6 and prior

Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) Network Management Card 2 AOS version 7.0.4 and later

1-Phase Uninterruptible Power Supply (UPS) using NMC3

Smart-UPS

Network Management Card 3 AOS

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Smart-UPS Network Management Card 3 AOS version 1.4.2.1 and prior

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Smart-UPS Network Management Card 3 AOS version 1.5 and later

Symmetra

Network Management Card 3 AOS

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Symmetra Network Management Card 3 AOS version 1.4.2.1 and prior

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Symmetra Network Management Card 3 AOS version 1.5 and later

Galaxy 3500

Network Management Card 2 AOS

Network Management Card 3 AOS

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Galaxy 3500 Network Management Card 2 AOS Network Management Card 3 AOS version 1.4.2.1 and prior

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Galaxy 3500 Network Management Card 2 AOS Network Management Card 3 AOS version 1.5 and later

APC Rack Power Distribution Units (PDU) using NMC2

2G Metered/Switched Rack PDUs with embedded NMC2

Network Management Card AOS 2

Schneider Electric APC Rack Power Distribution Units (PDU) using NMC2 2G Metered/Switched Rack PDUs with embedded NMC2 Network Management Card AOS 2 version 6.9.6 and prior

Schneider Electric APC Rack Power Distribution Units (PDU) using NMC2 2G Metered/Switched Rack PDUs with embedded NMC2 Network Management Card AOS 2 version 7.0.6 and later

APC Rack Power Distribution Units (PDU) using NMC3

2G Metered/Switched Rack PDUs with embedded NMC3

Network Management Card 3 AOS

Schneider Electric APC Rack Power Distribution Units (PDU) using NMC3 2G Metered/Switched Rack PDUs with embedded NMC3 Network Management Card 3 AOS version 1.4.0 and prior

Schneider Electric APC Rack Power Distribution Units (PDU) using NMC3 2G Metered/Switched Rack PDUs with embedded NMC3 Network Management Card 3 AOS 1.5.0

APC 3-Phase Power Distribution Products using NMC2

Galaxy RPP

Network Management Card AOS 2

Schneider Electric APC 3-Phase Power Distribution Products using NMC2 Galaxy RPP Network Management Card AOS 2 version 6.9.6 and prior

Schneider Electric APC 3-Phase Power Distribution Products using NMC2 Galaxy RPP Network Management Card AOS 2 version 7.0.4 and later

Network Management Card AOS 2

Schneider Electric APC 3-Phase Power Distribution Products using NMC2 GRPPIP2X84 Network Management Card AOS 2 version 6.9.6 and prior

Schneider Electric APC 3-Phase Power Distribution Products using NMC2 GRPPIP2X84 Network Management Card AOS 2 version 7.0.4 and later

Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P)

Schneider Electric Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P) PDPB150G6F Network Management Card AOS 2 version 6.9.6 and prior

Schneider Electric Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P) PDPB150G6F Network Management Card AOS 2 >=7.0.4

Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU)

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40G6FK1-M Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40G6FK1-M Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40F6FK1-M Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40F6FK1-M Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40L6FK1-M Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40L6FK1-M Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10M Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10M Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60G6FK1 Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60G6FK1 Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60F6FK1 Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60F6FK1 Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10 Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10 Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40E5EK20-M Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40E5EK20-M Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40H5EK20-M Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40H5EK20-M Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60L6FK1 Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60L6FK1 Network Management Card AOS 2 >=7.0.4

Network Management Card 2 for Modular 150/175kVA PDU (XRDP)

Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150G6F Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150G6F Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150L6F Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150L6F Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM175G6H Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM175G6H Network Management Card AOS 2 >=7.0.4

Network Management Card 2 for 400 and 500 kVA (PMM)

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALA Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALA Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALAX Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALAX Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-CUB Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-CUB Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALA Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALA Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALAX Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALAX Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-CUB Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-CUB Network Management Card AOS 2 >=7.0.4

Network Management Card 2 for Modular PDU (XRDP2G)

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM72F-5U Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM72F-5U Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-5U Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-5U Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM144F Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM144F Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-R Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-R Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM277H Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM277H Network Management Card AOS 2 >=7.0.4

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM288G6H Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM288G6H Network Management Card AOS 2 >=7.0.4

Rack Automatic Transfer Switches (ATS) Embedded NMC2

Rack Automatic Transfer Switches

Network Management Card AOS 2 (ATS4G)

Schneider Electric Rack Automatic Transfer Switches (ATS) Embedded NMC2 Rack Automatic Transfer Switches Network Management Card AOS 2 (ATS4G) <=6.9.6

Schneider Electric Rack Automatic Transfer Switches (ATS) Embedded NMC2 Rack Automatic Transfer Switches Network Management Card AOS 2 (ATS4G) >=7.0.4

Environmental Monitoring Unit with embedded NMC2 (NB250)

NetBotz NBRK0250

Network Management Card AOS 2

Schneider Electric Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250 Network Management Card AOS 2 <=6.9.6

Schneider Electric Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250 Network Management Card AOS 2 >=7.0.4

Battery Management Products Network Management Card 2 (NMC2)

AP9922 Battery Management System (BM4)

Network Management Card AOS 2

Schneider Electric Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4) Network Management Card AOS 2 <=6.9.6

Schneider Electric Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4) Network Management Card AOS 2 >=7.0.4

Battery Management Products

EcoStruxure Micro Data Center (MDC)

Network Management Card AOS 2 (ATS4G)

Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS <=6.9.8

Schneider Electric Battery Management Products EcoStruxure Micro Data Center (MDC) Network Management Card AOS 2 (ATS4G) >=7.0.4

Network Management Card 2 (NMC2) Cooling Products

InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G)

Network Management Card AOS 2

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G) Network Management Card AOS 2 >=7.0.4

InRow Cooling for series ACRC10x SKUs (RC10X2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRC10x SKUs (RC10X2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRC10x SKUs (RC10X2G) Network Management Card AOS 2 >=7.0.4

InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G) Network Management Card AOS 2 >=7.0.4

InRow Cooling Display for series ACRD3xx (ACRC2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling Display for series ACRD3xx (ACRC2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling Display for series ACRD3xx (ACRC2G) Network Management Card AOS 2 >=7.0.4

InRow Cooling for series ACSC1xx SKUs (SC2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACSC1xx SKUs (SC2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACSC1xx SKUs (SC2G) Network Management Card AOS 2 >=7.0.4

InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G) Network Management Card AOS 2 >=7.0.4

Ecoflair IAEC25/50 Air Economizer Display (EB2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Ecoflair IAEC25/50 Air Economizer Display (EB2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Ecoflair IAEC25/50 Air Economizer Display (EB2G) Network Management Card AOS 2 >=7.0.4

Uniflair SP UCF0481I, UCF0341I (UNFLRSP)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair SP UCF0481I, UCF0341I (UNFLRSP) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair SP UCF0481I, UCF0341I (UNFLRSP) Network Management Card AOS 2 >=7.0.4

Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO) Network Management Card AOS 2 >=7.0.4

Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G) Network Management Card AOS 2 >=7.0.4

Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL) Network Management Card AOS 2 >=7.0.4

Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA) Network Management Card AOS 2 >=7.0.4

Uniflair Display for Trim Chiller (TRMCHLR)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Trim Chiller (TRMCHLR) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Trim Chiller (TRMCHLR) Network Management Card AOS 2 >=7.0.4

Uniflair BCWC Chiller (AQUACENTR)

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair BCWC Chiller (AQUACENTR) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair BCWC Chiller (AQUACENTR) Network Management Card AOS 2 >=7.0.4

Refrigerant Distribution Unit: ACDA9xx (RDU)

Network Management Card AOS 2

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Refrigerant Distribution Unit: ACDA9xx (RDU) Network Management Card AOS 2 <=6.9.6

Schneider Electric Network Management Card 2 (NMC2) Cooling Products Refrigerant Distribution Unit: ACDA9xx (RDU) Network Management Card AOS 2 >=7.0.4

CVE-2021-22810

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.

CVE Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download.

V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.
Please contact your local support team for SYPX application upgrade.

V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.
Please contact your local support team for application upgrades for these models.

V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download

V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download

NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download

V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download

V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.
Please contact your local support team for application upgrade.

V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download

V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.
Please contact your local support team for upgrades.

V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released

V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.
Please contact your local support team for BM4 application upgrade.

V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.
Please contact your local support team for MDC application upgrade.

CVE-2021-22811

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted.

CVE Description

CVE-2021-22812

CVE Description

CVE-2021-22813

CVE Description

CVE-2021-22814

CVE Description

CVE-2021-22815

CVE Description


Summary: Original Release

Summary: Windows Print Spooler embedded in EcoStruxure™ Process Expert - SEVD-2021-313-04(V2.0) PDF Version

Summary: Windows Print Spooler embedded in EcoStruxure™ Process Expert - SEVD-2021-313-04(V2.0) CSAF Version

Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert product.  The EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market-agile plant. CVE-2021-34527 and CVE-2021-1675, also known as PrintNightmare, affects a native, built-in Windows service named “Print Spooler” that is enabled by default on Windows machines. The purpose of Print Spooler is to manage printers or printer servers.  EcoStruxure™ Process Expert uses Microsoft embedded virtualization technology that cannot be patched using standard Microsoft update steps. An upcoming release of EcoStruxure™ Process Expert will address this issue directly. Failure to apply the mitigations provided below may allow an attacker to perform privileged file operations, which could result in remote code execution.  March 2022 Update: EcoStruxure™ Process Expert 2021 includes a fix for these vulnerabilities.

Overview

Schneider Electric

EcoStruxure™ Process Expert

Schneider Electric EcoStruxure™ Process Expert version prior to V2021

Schneider Electric EcoStruxure™ Process Expert V2021

CVE-2021-34527

Windows Print Spooler Remote Code Execution Vulnerability.

CVE Description

Version 2021 of EcoStruxure™ Process Expert includes a fix for these vulnerabilities and is available for download here:  https://www.se.com/myschneider/documentsDownloadCenterDetail/i n/en/EPE2021Release    It is recommended to first read the ReadMe in its entirety before proceeding with the software installation.  If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:   • Setup network segmentation and implement a perimeter firewall to filter all unauthorized access to RPC Endpoint Mapper (135/TCP) and SMB (139/TCP and 445/TCP). • Disable the Print Spooler services when print functionality is not needed on all client machines that are authorized to interact with the EPE system server. Please refer to Microsoft Workaround https://msrc.microsoft.com/updateguide/vulnerability/CVE-2021-34527  • Harden all Windows workstations using the hardening recommendations found in the Cybersecurity Reference Manual   To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric’s security notification service here:  https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp

Windows Print Spooler Elevation of Privilege Vulnerability.

CVE Description

CVE-2021-1675