CVE-2024-0568 is a high severity improper authentication flaw in Schneider Electric Easergy Room Controllers, scored CVSS 8.8. The record lists Schneider Electric RMNF22TB30 and RENF22R2MMW devices and their firmware. Open Schneider Electric security notice SEVD-2024-044-02 for fixed firmware and remediation. The sections below cover how to check and what to do first.
What's affected
The record lists Schneider Electric RMNF22TB30 and RENF22R2MMW devices and their firmware. The advisory is SEVD-2024-044-02.
The CVSS vector in the record is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, with a base score of 8.8 (High). KEV status: not listed in the record.
Fixed version: Open Schneider Electric security notice SEVD-2024-044-02 for fixed firmware and remediation. The record gives no version.
How to check if you're exposed
Open the device or product admin interface and read the firmware or software version on the system or about page. Compare it with the version in the record, and with the vendor notice. If you cannot tell, ask the vendor or integrator for the exact build.
What to do now
- Inventory the affected devices and where they sit on the network.
- Apply the vendor fix or firmware named in the advisory, and confirm the version afterwards.
- Limit access to the management interface to a trusted network and require strong credentials.
- Record the device in your asset inventory with the CVE so the fix is tracked.
Why it matters
CWE-287 describes this class. Improper authentication means the system does not properly confirm who is making a request before letting it change something. On a device with a short range radio interface the risk is tied to physical proximity. Authentication on every configuration path, not only the network ones, is the usual lesson.
The record does not mark this CVE as exploited in the wild, and it is not in the CISA KEV catalog. Published 2024-02-14.
Safeguard Gold keeps a page for this CVE at gold.safeguard.sh, and the free in-browser dependency scan can show whether software you build bundles related components.
Quick check
Is CVE-2024-0568 exploited in the wild?
The record's KEV flag is false, and none of the pages I fetched said otherwise. That is not proof of safety, so still patch or restrict access.
Where do I get the fix?
From the vendor or integrator. The advisory linked in the sources is the place to start.
Sources
- Safeguard Gold entry for CVE-2024-0568
- NVD record data for CVE-2024-0568, including the references listed there (the other reference pages were not fetched for this post).
Last reviewed: 19 October 2026.
