SRC-2020-0010 : Schneider Electric EcoStruxure Operator Terminal Expert Hardcoded Cryptographic Key Information Disclosure Vulnerability
EcoStruxure Operator Terminal Expert
This vulnerability allows local attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Operator Terminal Expert. Local access to project files is required to exploit this vulnerability.
The specific flaw exists within the managed code. A hardcoded encryption key allows any user who accesses the encrypted databases inside of project files to reveal the plain-text sensitive content of those database files.
Schneider Electric has issued an update to correct this vulnerability. More details can be found at:
- 2020-02-18 – Public release of advisory
Proof of Concept:
This vulnerability was discovered by Chris Anastasio (muffin) and Steven Seeley (mr_me) of Incite Team