Schneider Electric Trio TView

Schneider Electric released an update to its Trio TView software to address vulnerabilities in the version of Java used by the software. Security researcher Karn Ganesheninformed Schneider Electric that their Trio TView software, which provides management and diagnostics for industrial radio systems, was using an outdated version of Java Runtime Environment that contained several vulnerabilities, some of which were zero-days. The outdated Java version is used in Trio TView versions 3.27.0 and earlier. The NJCCIC recommends all users and administrators of Trio TView review Schneider Electric's Security Notification, and apply the necessary update to version 3.29.0, which contains Java version 1.8.0 update 131, released in April 2017.