We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attack between the controller and the engineering workstation while a valid user is establishing a communication session. This vulnerability is inherent to Diffie Hellman algorithm which does not protect against Man-In-The-Middle attacks.
Reserved 2024-09-17 | Published 2024-11-13 | Updated 2024-11-13 | Assigner schneiderCWE-290 Authentication Bypass by Spoofing
download.schneider-electric.com/...7-02/SEVD-2024-317-02.pdf
Support options
