CVE-2024-5557mediumCWE-532

CVE-2024-5557: medium-severity vulnerability in Schneider Electric SpaceLogic AS-B

Published · Updated

Follow this CVE+ Monitor SpaceLogic AS-B+ Monitor SpaceLogic AS-P

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.5epss 0.2%
CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credentials when an attacker has access to the controller logs.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Schneider Electric · SpaceLogic AS-BSchneider Electric · SpaceLogic AS-P
Related CVEs — Schneider Electric SpaceLogic AS-B

In the same product, most dangerous first.

CVE-2024-5558MEDIUMCVE-2024-5558EPSS 0.1%