Important Security Update available for Wiser MK II & SpaceLogic C-Bus Home Controllers

[Asli]

Dear C-Bus Community,

An Important Security Update is available for Wiser MK II & SpaceLogic C-Bus Home Controller to address a published vulnerability in the product.

Please see details under the Schneider Electric Security Notification link

Please update Wiser MK II & SpaceLogic C-Bus Home Controller to the latest firmware 1.32.35/2.00.24 to protect your customers from this vulnerability. To update, please download the latest PICED software (Version 4.14.1) from Schneider Electric Exchange Platform (see links below).

Please be advised that notification of this security update availability shall be pushed to all users of the IOS Wiser 2 Mobile application version 3.6 and later on September 5, 2022, advising the User to have their device firmware updated.

Recommendations:

• You are required to change the default password for admin profile
• You are strongly advised to ask your customers to set a unique password used only for this device.
• Advise your customers, user account passwords should be updated regularly for the device.
• Please read the release notes for more information

If you or your customers choose not to apply the remediation provided to address the vulnerability, then  it is advised to implement  the mitigations  defined in the Schneider Electric Security Notification in order to reduce risk of future exploitation.

If you have questions, please reach out to Schneider Electric Customer Care teams.

Links for download:
Wiser 2 / C-Bus Home Controller (5200WHC2 and WHC2_5918)	Download the Firmware Release Notes : Exchange Link
PICED (Programming Interface for C-Bus Embedded Devices)	Download the Software and Release Notes : Exchange Link for Release Notes Download Exchange Link for Software Download

[laurence_crowhu]

is the a location where all of the software/firmware is available,? It just seems thats its impossible to find at the moment, On the old site it was very easy. 

[Mr_C]

The Links Provided in the notification are working and will allow you to download PICED and firmware + Release notes. 

There is a technical issue with posting to the Products Software Download pages at this time, we are working to resolve this.