[Control systems] Schneider Electric security advisory (AV22-384)

Number: AV22-384
Date: 12 July 2022

On 12 July 2022 Schneider Electric published Security Advisories to address vulnerabilities in multiple products. Included were updates for the following:

  • Acti9 PowerTag Link C (A9XELC10-A) – version 1.7.5 and prior
  • Acti9 PowerTag Link C (A9XELC10-B) – version 2.12.0 and prior
  • Easergy P5 – firmware version 01.401.102 and prior
  • OPC UA Modicon Communication Module (BMENUA0100) – version 1.10 and prior
  • SpaceLogic C-Bus Home Controller – versions 1.31.460 and prior
  • X80 advanced RTU Communication Module (BMENOR2200H) – versions 1.0
  • X80 advanced RTU Communication Module (BMENOR2200H) – version 2.01 and later

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

Date modified: