#VU13020 Open redirect in Schneider Electric products - CVE-2017-5571

Vulnerability identifier: #VU13020

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2017-5571

CWE-ID: CWE-601

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
StruxureWare Power Monitoring Expert
EcoStruxure Power Monitoring Expert
CitectHistorian
Vijeo Historian
SCADA Expert Vijeo Citect
CitectSCADA
EcoStruxure Power SCADA Operations
Energy Expert
EcoStruxure Modicon Builder
PlantStruxure PES
Citect Anywhere

Software vendor:
Schneider Electric

The vulnerability allows a remote unauthenticated attacker to redirect the target user to external websites.

The weakness exists due to open redirect in lmadmin component. A remote attacker can use a specially crafted image link, trick the victim into opening it and redirect users to malicious website.

Install update from vendor's website.

• https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01