Schneider Electric Web Applications Sensitive Information Disclosure Vulnerability

A vulnerability allowing the exposure of sensitive information to unauthorized users has been identified in certain web applications by Schneider Electric. This issue could lead to the unauthorized disclosure of restricted web pages, unauthorized modification of web content, and denial-of-service conditions when modified pages invoke restricted functions.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, unauthorized web page modifications, and denial-of-service conditions on affected systems.

Remediation

Users are advised to consult the Security and Safety Notice SEVD-2025-014-05 for guidance on addressing this vulnerability.