SSH Interface Exposure in Schneider Electric Products
CVE-2024-5313

6.5MEDIUM

Key Information:

Vendor

Schneider Electric
Status
Evlink Home Firmware
Vendor
CVE Published:
12 June 2024

What is CVE-2024-5313?

A vulnerability exists in certain Schneider Electric products that exposes an SSH interface over the product's network interface. Although this does not allow for direct exploitation due to existing authentication mechanisms, it can facilitate port scanning and fingerprinting activities. Additionally, there is a potential risk for denial of service attacks targeting the exposed SSH interface, making it essential for users to assess and bolster their network security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.