CVE-2016-8374
Description
An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker may be able to disrupt a targeted web server, resulting in a denial of service because of UNCONTROLLED RESOURCE CONSUMPTION.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric magelis_gtu_universal_panel_firmware | No range specified | — |
| schneider-electric magelis_gto_advanced_optimum_panel_firmware | No range specified | — |
| schneider-electric magelis_sto5_small_panel_firmware | No range specified | — |
| schneider-electric magelis_stu_small_panel_firmware | No range specified | — |
| schneider-electric magelis_xbt_gh_advanced_hand-held_panel_firmware | No range specified | — |
| schneider-electric magelis_xbt_gk_advanced_touchscreen_panel_with_keyboard_firmware | No range specified | — |
| schneider-electric magelis_xbt_gt_advanced_touchscreen_panel_firmware | No range specified | — |
| schneider-electric magelis_xbt_gtw_advanced_open_touchscreen_panel_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.