Schneider ELectric ASCO 5350 Eight Channel Remote Annunciator

• CVE-2025-1070 High 8.1 CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded. 0.5%
• CVE-2025-1060 High 7.5 CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker. 0.2%
• CVE-2025-1059 High 7.5 CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device. 0.5%
• CVE-2025-1058 High 8.1 CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded. 0.2%