Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-6833

A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMIST

Description

A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric SE Magelis HMI Panels

  • all versions of HMIGTOaffected
  • all versions of HMISTOaffected
  • all versions of XBTGHaffected
  • all versions of HMIGTUaffected
  • all versions of HMIGTUXaffected
  • all versions of HMISCUaffected
  • all versions of HMISTUaffected
  • all versions of XBTGTaffected
  • all versions of HMIGXOaffected
  • all versions of HMIGXUaffected

References