CVE-2019-6833
First published: Tue Sep 17 2019(Updated: )
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Hmigto Firmware | ||
| Schneider-electric Hmigto1300 | ||
| Schneider-electric Hmigto1310 | ||
| Schneider-electric Hmigto2300 | ||
| Schneider-electric Hmigto2310 | ||
| Schneider-electric Hmigto2315 | ||
| Schneider-electric Hmigto3510 | ||
| Schneider-electric Hmigto4310 | ||
| Schneider-electric Hmigto5310 | ||
| Schneider-electric Hmigto5315 | ||
| Schneider-electric Hmigto6310 | ||
| Schneider-electric Hmigto6315 | ||
| Schneider-electric Hmisto Firmware | ||
| Schneider-electric Hmisto501 | ||
| Schneider-electric Hmisto511 | ||
| Schneider-electric Hmisto512 | ||
| Schneider-electric Hmisto531 | ||
| Schneider-electric Hmisto532 | ||
| Schneider-electric Hmisto705 | ||
| Schneider-electric Hmisto715 | ||
| Schneider-electric Hmisto735 | ||
| Schneider-electric Xbtgh Firmware | ||
| Schneider-electric Xbtgh2460 | ||
| Schneider-electric Hmigtu Firmware | ||
| Schneider-electric Hmig2u | ||
| Schneider-electric Hmig3u | ||
| Schneider-electric Hmig3ufc | ||
| Schneider-electric Hmig5u | ||
| Schneider-electric Hmig5u2 | ||
| Schneider-electric Hmig5ufc | ||
| Schneider-electric Hmig5ul8a | ||
| Schneider-electric Hmiscu Firmware | ||
| Schneider-electric Hmiscu6a5 | ||
| Schneider-electric Hmiscu6b5 | ||
| Schneider-electric Hmiscu8a5 | ||
| Schneider-electric Hmiscu8b5 | ||
| Schneider-electric Hmistu Firmware | ||
| Schneider-electric Hmistu655 | ||
| Schneider-electric Hmistu655w | ||
| Schneider-electric Hmistu855 | ||
| Schneider-electric Hmistu855w | ||
| Schneider-electric Xbtgt Firmware | ||
| Schneider-electric Xbtgt2430 | ||
| Schneider-electric Xbtgt2930 | ||
| Schneider-electric Hmigxo Firmware | ||
| Schneider-electric Hmigxo | ||
| Schneider-electric Hmigxu Firmware | ||
| Schneider-electric Hmigxu35 | ||
| Schneider-electric Hmigxu55 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-6833.
What is the severity rating of CVE-2019-6833?
The severity rating of CVE-2019-6833 is medium with a value of 6.5.
Which software versions are affected by CVE-2019-6833?
The Magelis HMI Panels, including all versions of HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, HMIGXO, and HMIGXU are affected by CVE-2019-6833.
What is the impact of CVE-2019-6833?
The vulnerability could cause a temporary freeze of the HMI when a high rate of frames is received.
How can I fix CVE-2019-6833?
To fix CVE-2019-6833, it is recommended to apply the security patches provided by Schneider-electric. Please refer to their website for more information.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric hmigto firmware
- canonical/schneider-electric hmigto1300
- canonical/schneider-electric hmigto1310
- canonical/schneider-electric hmigto2300
- canonical/schneider-electric hmigto2310
- canonical/schneider-electric hmigto2315
- canonical/schneider-electric hmigto3510
- canonical/schneider-electric hmigto4310
- canonical/schneider-electric hmigto5310
- canonical/schneider-electric hmigto5315
- canonical/schneider-electric hmigto6310
- canonical/schneider-electric hmigto6315
- canonical/schneider-electric hmisto firmware
- canonical/schneider-electric hmisto501
- canonical/schneider-electric hmisto511
- canonical/schneider-electric hmisto512
- canonical/schneider-electric hmisto531
- canonical/schneider-electric hmisto532
- canonical/schneider-electric hmisto705
- canonical/schneider-electric hmisto715
- canonical/schneider-electric hmisto735
- canonical/schneider-electric xbtgh firmware
- canonical/schneider-electric xbtgh2460
- canonical/schneider-electric hmigtu firmware
- canonical/schneider-electric hmig2u
- canonical/schneider-electric hmig3u
- canonical/schneider-electric hmig3ufc
- canonical/schneider-electric hmig5u
- canonical/schneider-electric hmig5u2
- canonical/schneider-electric hmig5ufc
- canonical/schneider-electric hmig5ul8a
- canonical/schneider-electric hmiscu firmware
- canonical/schneider-electric hmiscu6a5
- canonical/schneider-electric hmiscu6b5
- canonical/schneider-electric hmiscu8a5
- canonical/schneider-electric hmiscu8b5
- canonical/schneider-electric hmistu firmware
- canonical/schneider-electric hmistu655
- canonical/schneider-electric hmistu655w
- canonical/schneider-electric hmistu855
- canonical/schneider-electric hmistu855w
- canonical/schneider-electric xbtgt firmware
- canonical/schneider-electric xbtgt2430
- canonical/schneider-electric xbtgt2930
- canonical/schneider-electric hmigxo firmware
- canonical/schneider-electric hmigxo
- canonical/schneider-electric hmigxu firmware
- canonical/schneider-electric hmigxu35
- canonical/schneider-electric hmigxu55