Schneider Electric Magelis XBT HMI Controller CVE-2013-2762 Remote Security Bypass Vulnerability

Bugtraq ID:	58953
Class:	Design Error
CVE:	CVE-2013-2762
Remote:	Yes
Local:	No
Published:	Mar 20 2013 12:00AM
Updated:	Mar 19 2015 08:10AM
Credit:	Arthur Gervais
Vulnerable:
Not Vulnerable:

Schneider Electric Magelis XBT HMI Controller CVE-2013-2762 Remote Security Bypass Vulnerability

Schneider Electric Magelis XBT HMI controller is prone to a remote security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass security restrictions and perform unauthorized actions.

Schneider Electric Magelis XBT HMI Controller CVE-2013-2762 Remote Security Bypass Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric Magelis XBT HMI Controller CVE-2013-2762 Remote Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric Magelis XBT HMI Controller CVE-2013-2762 Remote Security Bypass Vulnerability

References:

• Schneider Electric HomePage (Schneider Electric)
  
• ICSA-13-077-01A - SCHNEIDER ELECTRIC PLCS MULTIPLE VULNERABIL I TIES (ICS-CERT)