IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2024-282-07 — System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs

CRITICAL
CVSS 9.8
Date 2026-10-16T20:33:26+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 08-Oct-24 Document Reference Number – SEVD-2024-282-07 Page 1 of 4 ## System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs 8 October 2024 Overview Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC Series and Pro-face PS5000 trusted Legacy industrial PC Series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iPCs which incorporate slim, flexible and durable design allowing each customer to configure their iPC based on their individual application needs. These products offer flexible connectivity to a range of devices and designs. Failure to apply the remediations provided below may risk denial of service, sensitive information disclosure, integrity issues, which could result in operational failures. Affected Products and Versions Product Version System Monitor application in Harmony Industrial PC HMIBMO/HMIBMI/HMIPSO/HMIBMP/HMIBMU/HMIPSP/HMIPEP series All versions System Monitor application in Pro-face Industrial PC PS5000 series All versions Vulnerability Details CVE ID: CVE-2024-8884 CVSS v3.1 Base Score 9.8 | Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http .

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2024-8884 9.8 critical
CVE-2024-8884. CWE-200: Information Exposure vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http.

// Remediations (4)

Patch: Customer can uninstall System Monitor application using installer available for download here: htt
Customer can uninstall System Monitor application using installer available for download here: https://www.proface.com/en/product/ipc/ps5000/download Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance removing a patch. Please follow the steps described in the guideline attached as a .pdf in the downloaded uninstaller guide.We strongly recommend the use of back-ups and evaluating the impact of this uninstaller in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance.
Mitigation: If customers choose not to apply the remediation provided above, they should immediately apply the
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Stop the system monitor if not required by turning off the services as specified in user guide: Pro-face PS5000 legacy industrial PC Series User Manual • Setup network segmentation and implement a firewall to block all unauthorized access to configured HTTP/HTTPS ports.
Mitigation: If customers choose not to apply the remediation provided above, they should immediately apply the
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Stop the system monitor if not required by turning off the services as specified in user guide: o Harmony Industrial PC Series User Manual • Setup network segmentation and implement a firewall to block all unauthorized access to configured HTTP/HTTPS ports.
Patch: Customer can uninstall System Monitor application using installer available for download here: htt
Customer can uninstall System Monitor application using installer available for download here: https://www.se.com/ww/en/product-range/61054- harmony-industrial-pc/#software-and-firmware Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance removing a patch. Please follow the steps described in the guideline attached as a .pdf in the downloaded uninstaller guide. We strongly recommend the use of back-ups and evaluating the impact of this uninstaller in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance.

// References