Sensitive Information Exposure in Schneider Electric Web Products
CVE-2024-12142
8.8HIGH
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 17 January 2025
What is CVE-2024-12142?
A vulnerability exists within Schneider Electric’s web products that allows unauthorized users to access sensitive information. This exposure could lead to information disclosure of restricted web pages, and potentially allow modifications to such pages. In certain scenarios, the vulnerability may also result in denial of service if restricted functions are improperly invoked. It is crucial for organizations using Schneider Electric's web products to assess their security measures and address any potential risks associated with this vulnerability.
Affected Version(s)
BMXNOE0100 All versions
BMXNOE0110 All Versions
BMXNOR0200H Versions prior to SV1.70IR26