What’s Vulnerable › Vulnerabilities
CVE-2019-6833
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-09-17 · updated 2026-06-17
- Weakness: CWE-754
Description
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
Affected products
- Schneider-Electric Hmigto Firmware: all versions
- Schneider-Electric Hmigtu Firmware: all versions
- Schneider-Electric Hmigxo Firmware: all versions
- Schneider-Electric Hmigxu Firmware: all versions
- Schneider-Electric Hmiscu Firmware: all versions
- Schneider-Electric Hmisto Firmware: all versions
- Schneider-Electric Hmistu Firmware: all versions
- Schneider-Electric Xbtgh Firmware: all versions
- Schneider-Electric Xbtgt Firmware: all versions
References
- https://security.cse.iitk.ac.in/responsible-disclosure
- https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-225-01
- https://security.cse.iitk.ac.in/responsible-disclosure
- https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-225-01
Get alerted when CVE-2019-6833 or the next vulnerability affects your stack