Analysis Summary

CVE-2024-5557

Schneider Electric SpaceLogic AS-P and AS-B Automation Servers could allow a remote authenticated attacker to obtain sensitive information, caused by the insertion of sensitive information into log file. By gaining access to the log file, an attacker could exploit this vulnerability to obtain SNMP credentials information, and use this information to launch further attacks against the affected system.

Impact

• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-5557

Affected Vendors

Affected Products

• Schneider Electric SpaceLogic AS-P 5.0.3
• Schneider Electric SpaceLogic AS-B 5.0.3

Remediation

Refer to Schneider Electric Security Advisory for patch, upgrade or suggested workaround information.

Schneider Electric Security Advisory