CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.

Schneider Electric is aware of multiple vulnerabilities in its Pro-face GP-Pro EX and Remote HMI products.

The Pro-face [GP-Pro EX](https://www.proface.com/en/product/soft/gpproex/top) product is HMI Screen Editor & Logic Programming Software.

The Pro-face [Remote HMI](https://www.proface.com/en/product/soft/remotehmi/top) product is a remote monitoring software for mobile and allows you to check equipment information on a tablet or smartphone.

Failure to apply the mitigations provided below may risk Man-in-the-Middle attacks which could result in information disclosure, integrity issues and operational failures.

Schneider Electric is aware of multiple vulnerabilities in its Pro-face GP-Pro EX and Remote HMI products.

The Pro-face [GP-Pro EX](https://www.proface.com/en/product/soft/gpproex/top) product is HMI Screen Editor & Logic Programming Software.

The Pro-face [Remote HMI](https://www.proface.com/en/product/soft/remotehmi/top) product is a remote monitoring software for mobile and allows you to check equipment information on a tablet or smartphone.

Failure to apply the mitigations provided below may risk Man-in-the-Middle attacks which could result in information disclosure, integrity issues and operational failures.