​Summary of security related changes for September 2021.

​Security Enhancement Summary:
No security enhancements in firmware release(s).

Security Fix Summary:
No security fixes in firmware release(s).

Summary of security related changes for August 2021.

​Security Enhancement Summary:
Firmware C3414-500-S02K5_P5 released with these enhancements:
GUI: Configuration – CPU: Additional network service checkbox provided to allow customer to enable the ISaGRAF ETCP task, which will open listening ports to connect with ISaGRAF workbench.

Configuration – CPU: Non-secure networking services Telnet and FTP are disabled by default. Customer must enable them to use them and therefore assumes risk of using them.

Security Fix Summary:
Firmware C3414-500-S02K5_P5 released to fix:
VxWorks: Vulnerability CVE-2020-28895 malloc/calloc fix. Applied Wind River patch to bring code libraries current to 6.9.4.12 RCPL3 revision. This corrects issues with overflow causing malloc/calloc to return valid pointer when it should return fail indication NULL pointer.

VxWorks: Vulnerabilities CVE-2020-25176, CVE-2020-25182, CVE-2020-25184, CVE-2020-25178, CVE-2020-25180. Provide a way for users to manually disable the comm path the ISaGRAF Workbench uses to communicate with the ISaGRAF Runtime in the RTU when not downloading new ISaGRAF RLL programs or debugging those programs. This prevents unauthorized access using this comm path.

Command Log: Fix bug where command log fails to close Syslog socket on RTU side when it detects Syslog server has closed its end. Unclosed sockets could collect eventually to point where it affects system resources, causing RTU reset.​

Summary of security related changes for June 2021.

​Security Enhancement Summary:
No security enhancements in firmware release(s).

Security Fix Summary:
Vulnerability found if using ISaGRAF functionality.  Fix to resolve vulnerability currently scheduled to release by August 2021.  Mitigation instructions are as follows, note that if you are not using ISaGRAF functionality the default is to have all ports disabled and there is no vulnerability.
​
If you are using ISaGRAF RLL programs in the SAGE RTU, the ports will be open, and the firewall will be needed to block access to those ports.  If the Firewall rules are employed, you can verify they are working by trying to connect to the RTU with the ISaGRAF development system.  If the Firewall is implemented and working correctly, the ISaGRAF development system will fail to connect.

Firewall rules used to block access to TCP ports 1113 and 1131:

​Summary of security related changes for May 2021.
Security Fix Summary:
No security fixes in firmware release(s).
Security Enhancement Summary:
No security enhancements in firmware release(s).

We have launched a US Utility Forum on Schneider Electric Exchange Platform. Come participate in our community and stay-up-to-date on news, trends & best practices for the smart grid. 

Efficiently solve your problems by asking our network of utility experts and your peers and get personalized advice.
​
​Ask our community and extend your team. Whether it’s a question on power monitoring or control, connectivity or cybersecurity, you will find help! Get started here.
​
Exchange Platform: Collaborate with us and your peers!

​Summary of security related changes for March 2021.
Security Fix Summary:
​No security fixes in firmware release(s).
Security Enhancement Summary:
No security enhancements in firmware release(s).