CVE-2024-5557: Schneider Electric Spacelogic As-B Firmware

Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credentials when an attacker has access to the controller logs.

Affected products

• Schneider Electric Spacelogic As-B Firmware: before 6.0.1 (fixed in 6.0.1)
• Schneider Electric Spacelogic As-P Firmware: before 6.0.1 (fixed in 6.0.1)

Published 2024-06-12. Last modified 2026-06-17.