Environment:

Cybersecurity

Cause:

Treck Inc. publicly disclosed 19 vulnerabilities in its embedded TCP/IP stack, collectively known as Ripple20.
These vulnerabilities vary in severity, with several capable of enabling remote code execution. Other possible impacts include:

• Privilege escalation
• Denial of service
• Information leakage

These issues arise from flaws such as improper length handling, improper input validation, out‑of‑bounds read/write, integer overflows, double free, and others, as identified in federal advisories.

Resolution:

A list of Schneider Electric devices affected by the Ripple20 vulnerabilities is available in theattached document found under the Related tab.