ASCO 5310 Single-Channel Remote Annunciator vulnerabilities

3 known vulnerabilities in ASCO 5310 Single-Channel Remote Annunciator from Schneider Electric. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ASCO 5310 Single-Channel Remote Annunciator: Unrestricted Upload of File with Dangerous Type

  CVE-2025-1070Feb 13, 2025Schneider Electric

  CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded.

• 7.5 High severity

  ASCO 5310 Single-Channel Remote Annunciator: Cleartext Transmission of Sensitive Information

  CVE-2025-1060Feb 13, 2025Schneider Electric

  CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker.

• 7.5 High severity

  ASCO 5310 Single-Channel Remote Annunciator: Allocation of Resources Without Limits or Throttling

  CVE-2025-1059Feb 13, 2025Schneider Electric

  CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device.