CVE-2013-2762

2022-10-0316:15:01

mitre

www.cve.org

schneider electric magelis xbt

default password

authentication

remote attackers

access restrictions

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.1%

JSON

The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data.

References

ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf