Public

We strongly recommend the following industry cybersecurity best practices.

https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation,
software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

 www.se.com

About Schneider Electric

Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred
to as “SESU”).
The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to
download and install such updates.
Failure to apply the fix provided below may risk attacker to write arbitrary data into protected locations,
potentially leading to privilege escalation, arbitrary file corruption, exposure of application and system
information or a persistent denial of service condition.

Overview

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance removing a patch.

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 (CVSS v4.0-https://www.first.org/cvss/calculator/4.0). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer’s environment

Summary: Schneider Electric Software Update - SEVD-2025-224-03 PDF Version

Summary: Schneider Electric Software Update - SEVD-2025-224-03 CSAF Version

Schneider Electric Software Update

Summary: Original Release

Summary: SESU as standalone added to known-affected and fixed.

Schneider Electric

SESU

Schneider Electric SESU Versions prior to v3.0.12

EcoStruxure™ Automation Expert

Schneider Electric EcoStruxure™ Automation Expert

eXLhoist Configuration Software

Schneider Electric eXLhoist Configuration Software

EcoStruxure™ Automation Device Maintenance

Schneider Electric EcoStruxure™ Automation Device Maintenance

EcoStruxure™ Machine Expert

Schneider Electric EcoStruxure™ Machine Expert

EcoStruxure™ Machine Expert Basic

Schneider Electric EcoStruxure™ Machine Expert Basic

EcoStruxure™ Automation Expert Motion

Schneider Electric EcoStruxure™ Automation Expert Motion

EcoStruxure™ Operator Terminal Expert

Schneider Electric EcoStruxure™ Operator Terminal Expert

EcoStruxure™ Control Expert

Schneider Electric EcoStruxure™ Control Expert

EcoStruxure™ Process Expert

Schneider Electric EcoStruxure™ Process Expert

EcoStruxure™ Process Expert for AVEVA System Platform

EcoStruxure™ Architecture Builder

Schneider Electric EcoStruxure™ Architecture Builder

EcoStruxure™ Machine Expert HVAC

Schneider Electric EcoStruxure™ Machine Expert HVAC

EcoStruxure™ Power Operations (EPO)

Schneider Electric EcoStruxure™ Power Operations (EPO)

EcoStruxure™ Power Commission Desktop (EPC)

EcoStruxure™ Microgrid Operations Medium

Schneider Electric EcoStruxure™ Microgrid Operations Medium

EcoStruxure™ Microgrid Flex

Schneider Electric EcoStruxure™ Microgrid Flex

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric BESS ANSI

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P30

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P40

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy Studio

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Harmony XB5S Soft

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric eXLhoist Configuration Software

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Automation Device Maintenance

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Machine Expert Basic

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Automation Expert Motion

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Operator Terminal Expert

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Control Expert

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Process Expert for AVEVA System Platform

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Architecture Builder

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Machine Expert HVAC

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Power Operations (EPO)

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Power Commission Desktop (EPC)

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Microgrid Operations Medium

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure™ Microgrid Flex

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic™ P5

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic™ P7

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric ZelioSoft 2

Schneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric SoMove

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric BESS ANSI

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric Easergy MiCOM P30

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric Easergy MiCOM P40

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric Easergy Studio

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric Harmony XB5S Soft

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric eXLhoist Configuration Software

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Automation Device Maintenance

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Machine Expert Basic

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Automation Expert Motion

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Operator Terminal Expert

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Control Expert

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Process Expert for AVEVA System Platform

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Architecture Builder

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Machine Expert HVAC

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Power Operations (EPO)

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Power Commission Desktop (EPC)

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Microgrid Operations Medium

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric EcoStruxure™ Microgrid Flex

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric PowerLogic™ P5

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric PowerLogic™ P7

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric ZelioSoft 2

Schneider Electric SESU Version 3.0.12 installed on Schneider Electric SoMove

Improper Link Resolution Before File Access ('Link Following')

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause
arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file
corruption, exposure of application and system information or persistent denial of service when a low-privileged
attacker tampers with the installation folder.

CVE Description

Version 3.0.12 of SESU includes a fix for this
vulnerability and is available for download here:
https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft
wareUpdate/SESU_latest_version/SESU_latest
_setup_sfx.exe
Follow the installation instructions.
If a predecessor version of SESU is already
installed, then the update to V3.0.12 will be done
automatically as a critical update in the
background depending on the “automatic” update
configuration.

If customers choose not to apply the remediation provided above, they should immediately apply the following
mitigations to reduce the risk of exploit:
SESU Installation Directory (chosen by the customer at
installation time) should not be accessible from the network and
only by trusted persons.

CVE-2025-5296


Public

We strongly recommend the following industry cybersecurity best practices.

* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.

For more information refer to the Schneider Electric [Recommended Cybersecurity Best Practices](https://www.se.com/us/en/download/document/7EN52-0390/) document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.

For further information related to cybersecurity in Schneider Electric's products, visit the company's cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in EcoStruxure™ Building Operation Enterprise Server,
EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation.

[EcoStruxure™ Building Operation (EBO)](https://www.se.com/us/en/product-range/62111-ecostruxure-building-operation-software/#overview) is an open and scalable software platform providing insight, control
and management of multiple building systems and devices in one mobile-enabled convenient view. It delivers
valuable data for decision-making to improve energy management and increase efficiency for better building
performance and comfort, reduced carbon, and more sustainable building environments.

Failure to apply the remediations below may risk credential theft and subsequent unauthorized access and
remote code execution from within the BMS network, which could result in data breaches, and operational disruptions.

September 2025 Update: Updated affected and fixed version details.

Overview

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 ([CVSS v4.0](https://www.first.org/cvss/calculator/4.0)). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without
incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score
the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as
the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed
by the vulnerabilities described in this document within a customer’s environment.

Customers should use appropriate patching methodologies when applying these patches to their systems. We
strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and
Development environment or on an offline infrastructure. Contact Schneider Electric's [Customer Care Center](https://www.se.com/us/en/work/support/contacts.jsp) if you need assistance removing a patch.

Summary: EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation - SEVD-2025-224-04 PDF Version

Summary: EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation - SEVD-2025-224-04 CSAF Version

Summary: Original Release

Schneider Electric

Schneider Electric EcoStruxure™ Building Operation Enterprise Server All 7.x versions prior to 7.0.2.348

Schneider Electric EcoStruxure™ Building Operation Enterprise Server Version 7.0.2.348

>=6.x|<6.0.4.10001 (CP8)

Schneider Electric EcoStruxure™ Building Operation Enterprise Server All 6.x versions prior to 6.0.4.10001 (CP8)

6.0.4.10001 (CP8)

Schneider Electric EcoStruxure™ Building Operation Enterprise Server Version 6.0.4.10001 (CP8)

>=5.x|<5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Enterprise Server All 5.x versions prior to 5.0.3.17009 (CP16)

5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Enterprise Server Version 5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Enterprise Central All 7.x versions prior to 7.0.2.348

Schneider Electric EcoStruxure™ Building Operation Enterprise Central Version 7.0.2.348

>=6.x|<6.0.4.10001 (CP8)

Schneider Electric EcoStruxure™ Building Operation Enterprise Central All 6.x versions prior to 6.0.4.10001 (CP8)

6.0.4.10001 (CP8)

Schneider Electric EcoStruxure™ Building Operation Enterprise Central Version 6.0.4.10001 (CP8)

>=5.x|<5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Enterprise Central All 5.x versions prior to 5.0.3.17009 (CP16)

5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Enterprise Central Version 5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Workstation All 7.x versions prior to 7.0.2.348

Schneider Electric EcoStruxure™ Building Operation Workstation Version 7.0.2.348

>=6.x|<6.0.4.10001 (CP8)

Schneider Electric EcoStruxure™ Building Operation Workstation All 6.x versions prior to 6.0.4.10001 (CP8)

6.0.4.10001 (CP8)

Schneider Electric EcoStruxure™ Building Operation Workstation Version 6.0.4.10001 (CP8)

>=5.x|<5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Workstation All 5.x versions prior to 5.0.3.17009 (CP16)

5.0.3.17009 (CP16)

Schneider Electric EcoStruxure™ Building Operation Workstation Version 5.0.3.17009 (CP16)

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when
an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.

CVE Description

The following versions of Enterprise Server, Enterprise Central, Workstation include a fix for these vulnerabilities:

• 7.0.2.348

Step1: Locate the appropriate version for your system on the [EcoExpert Software Center](https://ecoxpert.se.com/software-center/building-automation/ebo-system/building-operation-2025-version-7.0).

Step 2: Follow the installation instructions provided in the accompanying readme file.

Additionally, ensure you are following the [EBO hardening guidelines](https://ecostruxure-building-help.se.com/bms/Topics/show.castle?id=14923&productversion=7).

The following versions of Enterprise Server, Enterprise Central, Workstation include a fix for these vulnerabilities:

• 6.0.4.10001 (CP8)

Step1: Locate the appropriate version for your system on the [EcoExpert Software Center](https://ecoxpert.se.com/de/software-center/building-automation/ebo-system/building-operation-2024-version-6.0).

Step 2: Follow the installation instructions provided in the accompanying readme file.

Additionally, ensure you are following the [EBO hardening guidelines](https://ecostruxure-building-help.se.com/bms/Topics/show.castle?id=14923&productversion=7).

The following versions of Enterprise Server, Enterprise Central, Workstation include a fix for these vulnerabilities:

• 5.0.3.17009 (CP16)

Step1: Locate the appropriate version for your system on the [EcoExpert Software Center](https://ecoxpert.se.com/de/software-center/building-automation/ebo-system/building-operation-2023-version-5.0).

Step 2: Follow the installation instructions provided in the accompanying readme file.

Additionally, ensure you are following the [EBO hardening guidelines](https://ecostruxure-building-help.se.com/bms/Topics/show.castle?id=14923&productversion=7).

If customers choose not to apply the remediation provided above, they should immediately apply the following
mitigations to reduce the risk of exploit:

* Implement strong access controls to limit system access to authorized personnel. Use multi factor
authentication if using EBO version 7.0 or later

* Use firewalls to segregate networks and protect the building management system

* Regularly monitor system activity

* Ensure you are following [EBO hardening guidelines](https://ecostruxure-building-help.se.com/bms/Topics/show.castle?id=14923&productversion=7).

CVE-2025-8449

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause
unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between
a valid user within the BMS network and the vulnerable products.

CVE Description

CVE-2025-8448


Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/: Modicon M340 X80
Ethernet Communication Modules, BMXNGD0100 https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/: M580 Global Data module, BMXNOC0401 https://www.se.com/us/en/product/BMXNOC0401/network-module-modicon-m340-ethernet-ip-and-modbus-tcp-4-x-rj45/?pageType=product&sourceId=BMXNOC0401: Modicon M340
X80 Ethernet Communication modules, BMXNOE0100 https://www.se.com/ww/en/product/BMXNOE0100/network-module-modicon-m340-modbus-tcp-1-x-rj45-flash-memory-card/?pageType=product&sourceId=BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module,
BMXNOE0110 https://www.se.com/ww/en/product/BMXNOE0110/ethernet-tcp-ip-network-module-modicon-m340-automation-platform-flash-memory-card-internal-ram-16-mb-1-x-rj45-10-100/: Modbus/TCP Ethernet Modicon M340 FactoryCast module product(s).
Failure to apply the fix provided below may risk Denial Of Service attack, which could result in the unavailability
of the devices.

Overview

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 ([CVSS v4.0](https://www.first.org/cvss/calculator/4.0)). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without
incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as
the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer's environment.

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric's [Customer Care Center](https://www.se.com/us/en/work/support/contacts.jsp) if you need assistance removing a patch.

Summary: Modicon M340 Controller and Communication Modules - SEVD-2025-224-05 PDF Version

Summary: Modicon M340 Controller and Communication Modules - SEVD-2025-224-05 CSAF Version

Summary: Original Release

Summary: Remediation is available for Modicon M340

Schneider Electric

Ethernet / Serial RTU Module

Ethernet / Serial RTU Module All versions

Modicon M340 X80 Ethernet Communication modules All versions

Modbus/TCP Ethernet Modicon M340 module

Modbus/TCP Ethernet Modicon M340 module Versions prior to 3.60

Modbus/TCP Ethernet Modicon M340 module Version 3.60

Modbus/TCP Ethernet Modicon M340 FactoryCast module Versions prior to 6.80

Modbus/TCP Ethernet Modicon M340 FactoryCast module Version 6.80

Modicon M340 Firmware Versions prior to SV3.70 installed on Modicon M340 Controller

Modicon M340 Firmware Version SV3.70 installed on Modicon M340 Controller

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific
crafted FTP command is sent to the device.

CVE Description

CVSS v4.0 Base Score 8.7 | High | [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)

CVSS v4.0 Score

Version 3.60 of BMXNOE0100 includes a fix for this
vulnerability and is available for download here:
https://www.se.com/ww/en/product/BMXNOE0100/networkmodule-modicon-m340-modbus-tcp-1-x-rj45-flash-memorycard/
Reboot is needed to complete the firmware upgrade

Version 6.80 of BMXNOE0110 includes a fix for this
vulnerability and is available for download here:
https://www.se.com/ww/en/product/BMXNOE0110/ethernettcp-ip-network-module-modicon-m340-automation-platformflash-memory-card-internal-ram-16-mb-1-x-rj45-10-100/
Reboot is needed to complete the firmware upgrade

Version SV3.70 of Modicon M340 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/1468-modicon-m340/#software-and-firmware

If customers choose not to apply the remediation provided above, they should immediately apply the following
mitigations to reduce the risk of exploit:
• FTP service is disabled by default
• Ensure to disable FTP service when not in use
• Setup network segmentation and implement a
firewall to block all unauthorized access to ports
21/FTP
• Use VPN (Virtual Private Networks) tunnels if
remote access is required

Schneider Electric is establishing a remediation plan for all
future versions of
• Modicon M340
• BMXNOR0200H
• BMXNGD0100
• BMXNOC401
We will update this document when the remediation is
available. Until then, customers should immediately apply
the following mitigations to reduce the risk of exploit:
• FTP service is disabled by default
• Ensure to disable FTP service when not in use
• Setup network segmentation and implement a
firewall to block all unauthorized access to ports
21/FTP
• Use VPN (Virtual Private Networks) tunnels if
remote access is required

CVE-2025-6625


Public

General Security Recommendations

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation,
software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

 www.se.com

About Schneider Electric

Schneider Electric is aware of a vulnerability in its [ATVdPAC module](http://www.se.com/ww/en/product/VW3A3530D/atv-dpac-module/) / [ATV6000 Medium Voltage Altivar Process Drives](http://www.se.com/ww/en/product-range/65607-altivar-process-atv6000) / [ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives](http://www.se.com/ww/en/product-range/62317-altivar-process-atv600) / [ATV930/950/955/960/980/9A0/9B0/9L0 Altivar Process Drives](http://www.se.com/ww/en/product-range/63124-altivar-process-atv900) / [ATV340E Altivar Machine Drives](http://www.se.com/ww/en/product-range/63441-altivar-machine-atv340#products) /[ATS490 Altivar Soft Starter](http://www.se.com/ww/en/product-range/213421154-altivar-soft-starter-ats490) / [Altivar Process Communication Modules](http://www.se.com/ww/en/product-range/62317-altivar-process-atv600/117623851529-modular-drives-apm) product(s).

Failure to apply remediation mitigations provided below may risk Cross-Site Scripting, which could result in partial loss of confidentiality and integrity of the workstation running a Web browser.

Overview

Summary: Multiple Altivar Process Drives and Communication Modules - SEVD-2025-252-01 PDF Version

Summary: Multiple Altivar Process Drives and Communication Modules - SEVD-2025-252-01 CSAF Version

Summary: Original Release

Summary: Fixed the typo on the product name Altivar Process Communication Modules.

Summary: Remediations are now available for ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives, ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives and ATV340E Altivar Machine Drives.

Summary: Remediations are now available for ATS490 Altivar Soft Starter.

Schneider Electric

Altivar Process Drives

ATV630 Altivar Process Drives Versions prior to 4.5

ATV630 Altivar Process Drives Version 4.5

ATV650 Altivar Process Drives Versions prior to 4.5

ATV650 Altivar Process Drives Version 4.5

ATV660 Altivar Process Drives Versions prior to 4.5

ATV660 Altivar Process Drives Version 4.5

ATV680 Altivar Process Drives Versions prior to 4.5

ATV680 Altivar Process Drives Version 4.5

ATV6A0 Altivar Process Drives Versions prior to 4.5

ATV6A0 Altivar Process Drives Version 4.5

ATV6B0 Altivar Process Drives Versions prior to 4.5

ATV6B0 Altivar Process Drives Version 4.5

ATV6L0 Altivar Process Drives Versions prior to 4.5

ATV6L0 Altivar Process Drives Version 4.5

ATV930 Altivar Process Drives Versions prior to 4.5

ATV930 Altivar Process Drives Version 4.5

ATV950 Altivar Process Drives Versions prior to 4.5

ATV950 Altivar Process Drives Version 4.5

ATV955 Altivar Process Drives Versions prior to 4.5

ATV955 Altivar Process Drives Version 4.5

ATV960 Altivar Process Drives Versions prior to 4.5

ATV960 Altivar Process Drives Version 4.5

ATV980 Altivar Process Drives Versions prior to 4.5

ATV980 Altivar Process Drives Version 4.5

ATV9A0 Altivar Process Drives Versions prior to 4.5

ATV9A0 Altivar Process Drives Version 4.5

ATV9B0 Altivar Process Drives Versions prior to 4.5

ATV9B0 Altivar Process Drives Version 4.5

ATV9L0 Altivar Process Drives Versions prior to 4.5

ATV9L0 Altivar Process Drives Version 4.5

ATV991 Altivar Process Drives Versions prior to 4.5

ATV991 Altivar Process Drives Version 4.5

ATV992 Altivar Process Drives Versions prior to 4.5

ATV992 Altivar Process Drives Version 4.5

ATV993 Altivar Process Drives Versions prior to 4.5

ATV993 Altivar Process Drives Version 4.5

ATV6000 Medium Voltage

ATV6000 Medium Voltage Altivar Process Drives All Versions

Altivar Machine Drives

ATV340E Altivar Machine Drives Versions prior to 4.5

ATV340 Altivar Machine Drives Version 4.5

Altivar Soft Starter

Altivar Soft Starter ATS490 Versions prior to v1.2ie05

Altivar Soft Starter ATS490 Version 1.2ie05

Altivar Process Communication Modules

Altivar Process Communication Modules All Versions

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read
data in a victim’s browser.

CVE Description

Version 25.0 of VW3A3530D: ATVdPAC module includes a
fix for this vulnerability and is available upon request from
Schneider Electric's [Customer Care Center](https://www.se.com/us/en/work/support/contacts.jsp).

The version 4.5 of ATV6xx drives includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/62317-altivar-process-atv600/#software-and-firmware

The version 4.5 of ATV9xx drives includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/63124-altivar-process-atv900/#software-and-firmware

The version 4.5 of ATV340 drives includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/63441-altivar-machine-atv340/#software-and-firmware

The version 1.2ie05 of ATS490 drives includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/ATS490-Firmware/

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:

* End user cybersecurity awareness and workstation protections

* Deactivate the Webserver after use when not needed.

* Setup network segmentation and implement a firewall to block all unauthorized access to port 80/HTTP

* Use VPN (Virtual Private Networks)
tunnels if remote access is required

Schneider Electric is establishing a remediation plan for all future versions of

* ATV6000 Medium Voltage Altivar Process Drives

* ILC992 InterLink Converter

* VW3A3720 & VW3A3721 Altivar Process Communication Modules that will include a fix for this vulnerability.

We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit:

* End user cybersecurity awareness and workstation protections.

* Deactivate the Webserver after use when not needed.

* Setup network segmentation and implement a firewall to block all unauthorized access to port 80/HTTP

* Use VPN (Virtual Private Networks) tunnels if remote access is required

CVE-2025-7746


Public

We strongly recommend the following industry cybersecurity best practices.

https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.

For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices https://www.se.com/us/en/download/document/7EN52-0390/ document.

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit)
product(s).

The Saitel DR RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview is a field device, offering a solid and powerful platform for data acquisition, communication,
automation and IED integration for distribution and transmission networks, generation sector and railway.

The Saitel DP RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747 is a modular platform for medium voltage and low voltage public distribution and
transmission network management.

Failure to apply the remediations provided below may risk command injection attack, which could result in
arbitrary code execution.

Overview

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 (CVSS v4.0 https://www.first.org/cvss/calculator/4.0). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without
incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score
the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as
the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed
by the vulnerabilities described in this document within a customer’s environment.

Customers should use appropriate patching methodologies when applying these patches to their systems. We
strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and
Development environment or on an offline infrastructure. Contact Schneider Electric's Customer Care Center https://www.se.com/us/en/work/support/contacts.jsp if you need assistance removing a patch.

Summary: Saitel DR & Saitel DP Remote Terminal Unit - SEVD-2025-252-02 PDF Version

Summary: Saitel DR & Saitel DP Remote Terminal Unit - SEVD-2025-252-02 CSAF Version

Summary: Original Release

Schneider Electric

Saitel DR RTU

Schneider Electric Saitel DR RTU Versions 11.06.29 and prior

Schneider Electric Saitel DR RTU Version 11.06.30

Saitel DP RTU

Schneider Electric Saitel DP RTU Versions 11.06.33 and prior

Schneider Electric Saitel DP RTU Version 11.06.34

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-78: Improper Neutralization of Special Elements used in an OS Command vulnerability exists that could
cause the execution of any shell command when executing a netstat command using BLMon Console in an
SSH session.

CVE Description

HUe Firmware version 11.06.30 of Saitel DR includes a fix for this
vulnerability and is available for download here:
• https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685

A reboot is needed to complete the firmware upgrade.

Firmware SM_CPU866e version 11.06.34 of Saitel DP includes a fix for this
vulnerability and is available for download here:
• https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747

A reboot is needed to complete the firmware upgrade.

If customers choose not to apply the remediation provided above, they should immediately apply the following
mitigations to reduce the risk of exploit:

* Restrict access to BLMon by assigning permissions only to a limited set of user roles.

* Ensure users are assigned the least privileged role that still allows them to perform their designated
tasks.

* Implement firewall rules to restrict SSH connections to the device.

CVE-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS Command vulnerability exists that could
cause command injection in BLMon that is executed in the operating system console when in a SSH session.

CVE Description

CVE-2025-9997


Public

We strongly recommend the following industry cybersecurity best practices.

* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.

For more information refer to the Schneider Electric [Recommended Cybersecurity Best Practices](https://www.se.com/us/en/download/document/7EN52-0390/) document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.

For further information related to cybersecurity in Schneider Electric's products, visit the company's cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation, software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

 www.se.com

About Schneider Electric

Schneider Electric is aware of a vulnerability in its EcoStruxure™ OPC UA Server Expert product(s).

The [EcoStruxure™ OPC UA Server Expert product(s)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=66388#overview) is a state-of-the-art OPC UA communication platform linking Modicon industrial equipment and PLCs to the Industrial Internet of Things (IIoT).

[EcoStruxure™ Modicon Communication Server](https://www.se.com/ww/en/download/document/ES_MCS_2.01_SP2/) is a communication platform seamlessly linking Modicon PLCs to Aveva System Platform by using the OPC UA protocol with the help of OPC UA Server.

Failure to apply the fix / mitigation provided below may risk denial of service of EcoStruxureTM OPCUA Server Expert, which could result in the loss of real-time process data from Modicon Controller.

Overview

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 ([CVSS v4.0](https://www.first.org/cvss/calculator/4.0)). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without
incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as
the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer's environment.

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric's [Customer Care Center](https://www.se.com/us/en/work/support/contacts.jsp) if you need assistance removing a patch.

Summary: EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server - SEVD-2025-287-01 PDF Version

Summary: EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server - SEVD-2025-287-01 CSAF Version

Summary: Original Release

Schneider Electric

EcoStruxure™ OPC UA Server Expert

<SV2.01 SP3

EcoStruxure™ OPC UA Server Expert Versions prior to SV2.01 SP3

SV2.01 SP3

EcoStruxure™ OPC UA Server Expert Version SV2.01 SP3

EcoStruxure™ Modicon Communication Server All versions

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of
service of EcoStruxure™ OPCUA Server Expert when a large number of OPC UA requests are sent to the
server.

CVE Description

Version SV2.01 SP3 of EcoStruxure™ OPC UA Server Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/66388-ecostruxure-opc-ua-server-expert/#software-and-firmware

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:

* Set the “Security Policy” to Basic256-Sha256 (default value indicated by unchecked “Security Policy” setting) used for secure communication between OPC UA client & server based on OPC UA standard.

* Ensure that the “Anonymous user token” setting remains unchecked (unchecked by default) to prevent anonymous authentication.

* Set “User authentication” setting (checked by default) used to authenticate & authorize OPC UA client.

* Set “X509 user token” setting (checked by default) used to authenticate & authorize OPC UA client.

For more details, refer to “EcoStruxure™ OPC UA Server Expert User Guide” chapter “Security Management”: https://www.se.com/ww/en/download/document/MFR53158/

* Follow workstation, network and site-hardening guidelines in the “Recommended Cybersecurity Best Practices”: https://www.se.com/ww/en/download/document/7EN52-0390/

Schneider Electric is establishing a remediation plan for all future versions of EcoStruxure™ Modicon Communication Server that will include a fix for this vulnerability. We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit:

* Set the “Security Policy” to Basic256-Sha256 (default value indicated by unchecked “Security Policy” setting) used for secure communication between OPC UA client & server based on OPC UA standard.

* Ensure that the “Anonymous user token” setting remains unchecked (unchecked by default) to prevent anonymous authentication.

* Set “User authentication” setting (checked by default) used to authenticate & authorize OPC UA client.

* Set “X509 user token” setting (checked by default) used to authenticate & authorize OPC UA client.

For more details, refer to “EcoStruxure™ Modicon Server User Guide” chapter “Security Settings”: https://www.se.com/fr/fr/download/document/EIO0000004083/

* Follow workstation, network and site-hardening guidelines in the “Recommended Cybersecurity Best Practices”: https://www.se.com/ww/en/download/document/7EN52-0390/

CVE-2024-10085


Public

General Security Recommendations

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation,
software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

 www.se.com

About Schneider Electric

Schneider Electric is aware of a vulnerability in its PowerChute™ Serial Shutdown product.
The [PowerChute™ Serial Shutdown](https://www.se.com/us/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling graceful system
shutdown and energy management capabilities for desktop, servers and workstations.
Failure to apply the mitigations or remediations provided below may risk elevation of privileges or
unauthenticated access which could result in disruption of operations and access to system data.

Overview

Summary: PowerChute™ Serial Shutdown - SEVD-2025-315-01 PDF Version

Summary: PowerChute™ Serial Shutdown - SEVD-2025-315-01 CSAF Version

PowerChute™ Serial Shutdown

Summary: Original Release

Schneider Electric

PowerChute™ Serial Shutdown

PowerChute™ Serial Shutdown Versions v1.3 and prior

PowerChute™ Serial Shutdown Version v1.4 installed on Microsoft Windows

PowerChute™ Serial Shutdown Version v1.4 installed on Red Hat Enterprise Linux

PowerChute™ Serial Shutdown Version v1.4 installed on SuSE Linux

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that
could cause elevated system access when a Web Admin user on the local network tampers with the POST
/REST/UpdateJRE request payload.

CVE Description

Version v1.4 of PowerChute™ Serial Shutdown includes a fix for this vulnerability
and is available for download here:
• Windows: https://www.se.com/ww/en/download/document/SPD
PCSS_WIN_EN/

Version v1.4 of PowerChute™ Serial Shutdown includes a fix for this vulnerability and is available for download here:
Linux: https://www.se.com/ww/en/download/document/SPD
PCSS_LNX_EN/

CVE-2025-11565

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an
attacker on the local network to gain access to the user account by performing an arbitrary number of
authentication attempts with different credentials on the /REST/shutdownnow endpoint.

CVE Description

CVE-2025-11566

CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when
the target installation folder is not properly secured.

CVE Description

To ensure remediation of CVE-2025-11567, Customers should immediately apply the following steps.
If PowerChute is installed in a custom folder, ensure that the required permissions
are set on the custom folder.
NOTE: It is recommended to set administrative permissions on the custom folder.
Specific instructions for these mitigations can be found in the [Security Handbook](https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-PCSSSH_EN).

CVE-2025-11567


Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in
EcoStruxureTM Machine SCADA Expert and Pro-face BLUE Open Studio products.
The EcoStruxureTM Machine SCADA Expert is software for developing HMI, SCADA, OEE and
Dashboard projects dedicated to Line Management & Lite Supervision applications to run in
Harmony Industrial PC and GTU Open Box.
Pro-face BLUE Open Studio is a development and runtime software that incorporates tools
users need to create SCADA HMI applications, dashboards, and OEE interfaces.
Failure to apply the remediation provided below may risk brute-force password recovery attacks,
which could result in unauthorized access to user accounts and lead to loss of Confidentiality,
and Integrity.

Overview

Summary: EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio - SEVD-2025-315-02 PDF Version

Summary: EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio - SEVD-2025-315-02 CSAF Version

Summary: Recommended Cybersecurity Best Practices

Summary: Original Release

Schneider Electric

EcoStruxure™ Machine SCADA Expert

<2023.1 Patch 1

EcoStruxure™ Machine SCADA Expert Versions prior to 2023.1 Patch 1

2023.1 Patch 1

EcoStruxure™ Machine SCADA Expert Version 2023.1 Patch 1

Pro-face

BLUE Open Studio

<2023.1 Patch 1

Pro-face BLUE Open Studio Versions prior to 2023.1 Patch 1

2023.1 Patch 1

Pro-face BLUE Open Studio Version 2023.1 Patch 1

Use of a Broken or Risky Cryptographic Algorithm

Vulnerability disclosed by AVEVA Group Limited in its component impacts Schneider Electric software. Additional information about the vulnerabilities can be found in the AVEVA Advisories  at: [AVEVA Security Advisory (AVEVA-2025-006)](https://www.aveva.com/en/support-and-success/cyber-security-updates/)

Vulnerability Details

Passwords hashed with MD5:
The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge
Offline Cache files to reverse engineer Edge users’ app-native or Active Directory passwords through
computational brute-forcing of weak hashes.

CVE Description

Version 2023.1 Patch 1 of EcoStruxureTM Machine SCADA Expert
includes a fix for this vulnerability and is available for download
here:
https://www.se.com/ww/en/product-range/63734-ecostruxure
machine-scada-expert/#software-and-firmware
For additional details please refer to the supplied ReadMe help file
in Version 2023.1 Patch 1

Version 2023.1 Patch 1 of Pro-face BLUE Open Studio includes a
fix for this vulnerability and is available for download here:
https://www.proface.com/en/hmi_design_studio/bos/page/installer
For additional details please refer to the supplied Release Notes
file in Version 2023.1 Patch 1

If customers choose not to apply the remediation provided above, they should immediately
apply the following mitigations to reduce the risk of exploit:
• Access Control Lists should be applied to all folders where
users will save and load project files.
• Maintain a trusted chain-of-custody on project files during
creation, modification, distribution, backups, and use.
• Apply data-protection at the project level with a strong master
password. For configuration step-by-step refer to “Technical
Reference Manual” > Project Overview > Configuring
Additional Project Settings > Options Tab > Data Protection.
• If passwords are being used as function parameters inside
project documents (such as scripts or worksheets), it is
recommended to remove those passwords and use project
tags instead. For more information on tags refer to “Technical
Reference Manual” > Tags and the Tag Database > About
Tags and the Project Database.

CVE-2025-9317


Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro
DCS product formerly known as Foxboro Evo Process Automation System and I/A Series.
The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/#overview) is an innovative family of fault-tolerant, highly available
control components, which consolidates critical information and elevates staff capabilities to ensure
flawless, continuous plant operation.
Failure to apply the remediations provided below may risk allowing an authenticated user to
potentially enable information disclosure via a side channel with local access, which could result in
loss of system functionality or unauthorized access to system functions.

Overview

Hewlett Packard Enterprise Gen10 servers (H90, V91) running BIOS versions prior to 2.04 are affected. Hewlett Packard Inc has indicated that Zseries workstations (H92) running BIOS versions prior to 1.76 are affected.If any BIOS and OS security updates from and beyond the qualified released versions below have been applied, the systems are protected against the vulnerability described.1. HPE Gen10 Servers (H90, V91) Qualified BIOS update: TD66256024 – BIOS 2.42 (May 2021) 2. HPI Z4G4 Workstations (H92) Qualified BIOS update: TD102894820 – BIOS 2.92 (December 2023)

How to know if your machines are vulnerable?

Summary: EcoStruxure™ Foxboro DCS - SEVD-2025-343-01 PDF Version

Summary: EcoStruxure™ Foxboro DCS - SEVD-2025-343-01 CSAF Version

EcoStruxure™ Foxboro DCS

Summary: Original Release

Summary: H90 DC Server has been added to the affected products. The remediation section has been updated with H94 and details on how customers can determine if offer is impacted.

EcoStruxure™ Foxboro DCS Virtualization Server V95

EcoStruxure™ Foxboro DCS Standard Workstation Dell D96

Intel Xeon Silver 4110 default component of EcoStruxure™ Foxboro DCS Virtualization Server V91

Intel Xeon Silver 4110 default component of EcoStruxure™ Foxboro DCS Server H90

Intel Xeon W-2123 and prior default component of EcoStruxure™ Foxboro DCS Standard Workstation H92

Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability disclosed by INTEL in Intel Xeon Silver 4110 and Intel Xeon W-2123 and prior impact Schneider Electric EcoStruxure™ Foxboro DCS V91 DCS Virtualization Server and H92 DCS Standard Workstation.

Vulnerability Details

Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing
speculative execution may allow an authenticated user to potentially enable information disclosure via
a side channel with local access.
Additional information about the vulnerabilities can be found in the INTEL website:
[INTEL-SA-00233](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html)

CVE Description

The recommendation is to upgrade to latest Foxboro server (V95, H94) and workstations (Dell D96): Please contact your local Service Representative or Schneider Electric Process Automation Global Customer Support Center for information on how to migrate to new hardware.https://pasupport.schneider-electric.com/home2020.asp?code=i1swrtYD1O7YcWYkLo5iZJHxEEY9U-agDBBtcLSP7EXks

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: The BIOS, OS security patches are applied to significantly reduce the
exploit possibility. Additional information is available here:
 https://se.my.site.com/PAkb/s/article/KA000127385

Several layers of defense-in-depth mechanisms available in the
recommended security architecture of DCS system, including the
computers themselves, and by following the General Security
Recommendations specified below mitigate this vulnerability.
 https://pasupport.schneider-electric.com/Content/Documents/IASeries/b0700_lastrev/b0700hz_f.pdf

CVE-2018-12130


Public

We strongly recommend the following industry cybersecurity best practices.

* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.

For more information refer to the Schneider Electric [Recommended Cybersecurity Best Practices](https://www.se.com/us/en/download/document/7EN52-0390/) document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.

For further information related to cybersecurity in Schneider Electric's products, visit the company's cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update
Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services.

The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure™ Foxboro DCS system](https://www.se.com/ww/en/work/products/industrial-automation-control/foxboro-dcs/),
facilitates remote connectivity and diagnostics by continuously monitoring key performance indicators (KPI) on
the I/A Series or Control Software system's process.

Failure to apply the remediations provided below may risk a potential remote code execution event, which
could result in system-level privileges acquired by unauthorized parties.

Overview

Summary: EcoStruxure™ Foxboro DCS Advisor - SEVD-2025-343-02 PDF Version

Summary: EcoStruxure™ Foxboro DCS Advisor - SEVD-2025-343-02 CSAF Version

EcoStruxure™ Foxboro DCS Advisor

Summary: Original Release

Microsoft

Windows Server 2022

EcoStruxure™ Foxboro DCS Advisor services installed with Windows Server Update Services application installed on Microsoft Windows Server 2016 <10.0.14393.8524

EcoStruxure™ Foxboro DCS Advisor services installed with Microsoft Windows Server Update Services installed on Microsoft Windows Server 2016 10.0.14393.8524

EcoStruxure™ Foxboro DCS Advisor services installed with Microsoft Windows Server Update Services installed on Microsoft Windows Server 2022 <10.0.20348.4297

EcoStruxure™ Foxboro DCS Advisor services installed with Microsoft Windows Server Update Services installed on Microsoft Windows Server 2022 10.0.20348.4297

A vulnerability disclosed by Microsoft in the Microsoft Windows Server Update Services (WSUS) application impacts servers running Schneider Electric EcoStruxure™ Foxboro DCS Advisor. CVE ID: CVE-2025-59287. Additional information about CVE-2025-59287can be found here: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287

Vulnerability Details

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

CVE Description

Patch KB5070882 from Microsoft includes a fix for this vulnerability and is
available for download directly from WSUS.
Reboot may be required to complete patch update.
Customers should contact and work with [Global Customer Support](https://pasupport.se.com/home) to
verify update has been completed.

Patch KB5070884 from Microsoft includes a fix for this vulnerability and is
available for download directly from WSUS.
Reboot may be required to complete patch update.
Customers should contact and work with [Global Customer Support](https://pasupport.se.com/home) to
verify update has been completed.

CVE-2025-59287


Public

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These org`anizations will be fully aware of this situation and can support you through the process.

For further information related to cybersecurity in Schneider Electric's products, visit the company's cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation,
software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

 www.se.com

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities in Redis open-source database, affecting its Plant iT product.
The [Plant iT/Brewmaxx](https://www.proleit.com/plant-it/) product is an object-oriented and PLC-based process control system with integrated
Manufacturing Execution System functionality. The integrated and modular software platform consists of basic
systems, modules and add-ons that can be flexibly combined.
Failure to apply the remediations provided below may risk privilege escalation, which could result in remote
code execution.

Overview

Summary: Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx - SEVD-2026-013-01 PDF Version

Summary: Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx - SEVD-2026-013-01 CSAF Version

Summary: Original Release

Summary: Updated the CWE description of CVE-2025-46819

Schneider Electric

ProLeiT

Plant iT/Brewmaxx

ProLeiT Plant iT/Brewmaxx Version 9.60 and above

Patch ProLeiT-2025-001 installed on ProLeiT Plant iT/Brewmaxx

Additional information about CVE-2025-49844 can be found here: https://www.cve.org/CVERecord?id=CVE-2025-49844

CVE Description

Patch ProLeiT-2025-001 includes a fix to reduce the risk of exploit:
• Install the patch to disable the eval commands in Redis on:
o Application Server
o VisuHub
o Engineering Workstations
o Workstation with emergency mode functionality
• The patch  ProLeiT-2025-001 is available via ProLeiT Support:
https://www.proleit.com/support/
• Force usage of secure Redis configuration templates in system settings as
documented in the patch manual.
• Restart all patched Servers and Workstations

CVE-2025-49844

Additional information about CVE-2025-46817 can be found here: https://www.cve.org/CVERecord?id=CVE-2025-46817

CVE Description

CVE-2025-46817

Improper Control of Generation of Code ('Code Injection')

Additional information about CVE-2025-46818 can be found here: https://www.cve.org/CVERecord?id=CVE-2025-46818

CVE Description

CVE-2025-46818

Additional information about CVE-2025-46819 can be found here: https://www.cve.org/CVERecord?id=CVE-2025-46819

CVE Description

CVE-2025-46819


Public

We strongly recommend the following industry cybersecurity best practices.

https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation,
software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

About Schneider Electric

Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert
for AVEVA System Platform products.
The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire
infrastructure for a sustainable, productive and market-agile plant.
The EcoStruxure™ Process Expert for AVEVA System Platform product enables users to achieve operational
profitability from design engineering to meeting the demands of modern-day production. It provides an asset
centric and object-oriented automation platform to deploy system-wide standards in a digital ecosystem.
Failure to apply the Fix/Mitigations provided below may risk modification of the executable binaries, which
could result in privilege escalation.

Overview

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 ([CVSS v4.0](https://www.first.org/cvss/calculator/4.0)). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without
incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as
the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer's environment.

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Customer Care Center if you need assistance removing a patch.

Summary: Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert - SEVD-2026-013-02 PDF Version

Summary: Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert - SEVD-2026-013-02 CSAF Version

Summary: Original Release

Schneider Electric

EcoStruxure™ Process Expert

EcoStruxure™ Process Expert versions prior to 2025

EcoStruxure™ Process Expert  All Versions

CWE-276 : Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the
reverse shell when one or more executable service binaries are modified in the installation folder by a local
user with normal privilege upon service restart.

CVE Description

Version 2025 of EcoStruxure™ Process Expert includes a fix for this
vulnerability and is available for download here:
https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert

Schneider Electric is establishing a remediation plan for all the future versions
of EcoStruxure™™ Process Expert for AVEVA System Platform that will
include a fix for this vulnerability. We will update this document when the
remediation is available. Until then, customers should immediately apply the
following mitigations to reduce the risk of exploit:
• Recommended to apply application whitelisting at system level to allow
execution of authenticated applications. More details available here:
https://www.se.com/ww/en/download/document/EIO0000004778/
• Recommended to allow access to the system only to the required
users.

CVE-2025-13905


Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.

We provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.

We are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.

www.se.com

About Schneider Electric

Schneider Electric is aware of multiple vulnerabilities with EmberZNet disclosed by Silicon Labs.
Many vendors, including Schneider Electric, use Silicon Labs’ Zigbee processors in their offers.
The following have denial of service vulnerabilities: Wiser iTRV, Wiser RTR, Wiser UFH, Wiser
Heat Switch, Wiser Boiler Relay, cFMT (Exaact, Elko, Odace, Merten), Wiser Micromodule,
Iconic Wiser Connected Smart Dimmer, Iconic Zigbee devices, Wiser Application Modules,
Wiser Connected Pushbutton Switch/Dimmer/Shutter controller, Rotary Dimmer, Motion Sensor
Dimmer/Switch, Smart socket outlets, and EV socket outlet. See the following table.
Failure to apply the mitigations provided below may risk denial of service, which could result in
products being unavailable.

Overview

These vulnerabilities disclosed by Silicon Labs affect their Zigbee processors, which are used in multiple Schneider Electric's products.

Vulnerability Details

Summary: Multiple Vulnerabilities on Zigbee Products - SEVD-2026-013-03 PDF Version

Summary: Multiple Vulnerabilities on Zigbee Products - SEVD-2026-013-03 CSAF Version

Summary: Original Release

Schneider Electric

Wiser 16A Electrical Heat Switch

Wiser 16A Electrical Heat Switch All Versions

Iconic, Wiser Connected Smart Dimmer

Iconic, Wiser Connected Smart Dimmer All Versions

Iconic, Wiser Connected Smart Switch, 2AX All Versions

Iconic, Wiser Connected Smart Switch, 10AX All Versions

Iconic, Connected AC Fan Controller

Iconic, Connected AC Fan Controller All Versions

Iconic, Connected Smart Socket

Iconic, Connected Smart Socket All Versions

Wiser Connected Application Module 1-Gang All Versions

Wiser Connected Application Module 2-Gang All Versions

Wiser Connected Push Button Dimmer

Wiser Connected Push Button Dimmer All Versions

Wiser Connected Push Button Switch

Wiser Connected Push Button Switch All Versions

Wiser Connected Push Button Shutter

Wiser Connected Push Button Shutter All Versions

Wiser Connected Motion Dimmer

Wiser Connected Motion Dimmer All Versions

Wiser Connected Motion Switch

Wiser Connected Motion Switch All Versions

Wiser Connected Rotary Dimmer

Wiser Connected Rotary Dimmer All Versions

Connected Single Socket Outlet

Connected Single Socket Outlet All Versions

Connected Double Socket Outlet

Connected Double Socket Outlet All Versions

Fuga Connected Socket Outlet

Fuga Connected Socket Outlet All Versions

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A CWE-120: A buffer overflow vulnerability exists that could cause a denial of service when a
malicious device joins the network.

CVE Description

Customers should immediately apply the following mitigations to
reduce the risk of exploit:

To keep your Zigbee network safe and prevent unauthorized access:
• Restrict device access: Do not allow unknown devices to join
your network.
• Review hub settings: Check how your Zigbee hub manages
device pairing.
• Control network availability: Only open the network when
adding new devices and close it immediately after.
• Use install codes and avoid the well-known key: Whenever
possible, use unique install codes for added security.
Replace default keys with secure, unique keys.

CVE-2024-6350

CVE Description

CVE-2024-6351

CVE Description

CVE-2024-6352

CVE Description

CVE-2024-10106

A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial
of service when a malicious device joins the network.

CVE Description

CVE-2024-7322


Public

We strongly recommend the following industry cybersecurity best practices.

* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.

For more information refer to the Schneider Electric [Recommended Cybersecurity Best Practices](https://www.se.com/us/en/download/document/7EN52-0390/) document.

General Security Recommendations

This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.

For further information related to cybersecurity in Schneider Electric's products, visit the company's cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp

For More Information

THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND.  SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION

LEGAL DISCLAIMER

Schneider's purpose is to create Impact by empowering all to make the most of our energy and resources, bridging progress and
sustainability for all. We call this Life Is On.

Our mission is to be the trusted partner in Sustainability and Efficiency.

We are a global industrial technology leader bringing world-leading expertise in electrification, automation and digitization to smart
industries, resilient infrastructure, future-proof data centers, intelligent buildings, and intuitive homes. Anchored by our deep
domain expertise, we provide integrated end-to-end lifecycle AI enabled Industrial IoT solutions with connected products, automation,
software and services, delivering digital twins to enable profitable growth for our customers.

We are a people company with an ecosystem of 150,000 colleagues and more than a million partners operating in over 100 countries
to ensure proximity to our customers and stakeholders. We embrace diversity and inclusion in everything we do, guided by our
meaningful purpose of a sustainable future for all.

 www.se.com

About Schneider Electric

Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the single line diagram, to get the extensive bill of material of your switchboard, including all devices, connection items, and mounting components.

Failure to apply the mitigations/remediations provided below may risk memory corruption, heap-based buffer overflow, stack-based buffer overflow, which could result in local attackers being able to exploit these issues to potentially execute arbitrary code.

Overview

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric's [Customer Care Center](https://www.se.com/us/en/work/support/contacts.jsp) if you need assistance removing a patch.

Summary: Multiple Vulnerabilities on EcoStruxure Power Build Rapsody - SEVD-2026-013-04 PDF Version

Summary: Multiple Vulnerabilities on EcoStruxure Power Build Rapsody - SEVD-2026-013-04 CSAF Version

Summary: Original Release

Summary: Removed the link to the fix for Rapsody Belgium version, which was privately communicated to impacted users

Schneider Electric

EcoStruxure Power Build Rapsody software FR 2.8.1 and prior

2.8.1.0401 FR

EcoStruxure Power Build Rapsody software Version FR 2.8.1.0401

EcoStruxure Power Build Rapsody software INT 2.8.6 and prior

2.8.6.200 INT

EcoStruxure Power Build Rapsody software Version INT 2.8.6.200

EcoStruxure Power Build Rapsody software ES 2.8.5 and prior

2.8.5.0301 ES

EcoStruxure Power Build Rapsody software Version ES 2.8.5.0301

EcoStruxure Power Build Rapsody software BEL(NL) 2.8.3 and prior

2.8.3.0201 BEL(NL)

EcoStruxure Power Build Rapsody software Version BEL(NL) 2.8.3.0201

EcoStruxure Power Build Rapsody software BEL(FR) 2.8.8 and prior

2.8.8.0201 BEL(FR)

EcoStruxure Power Build Rapsody software Version BEL(FR) 2.8.8.0201

EcoStruxure Power Build Rapsody software FR 2.8.1.0300 and prior

EcoStruxure Power Build Rapsody software ES 2.8.5.0200 and prior

EcoStruxure Power Build Rapsody software PT 2.8.7.0100 and prior

2.8.7.0101 PT

EcoStruxure Power Build Rapsody software Version PT 2.8.7.0101

EcoStruxure Power Build Rapsody software BEL(FR) 2.8.8.0100 and prior

EcoStruxure Power Build Rapsody software BEL(EN) 2.8.3.0100 and prior

2.8.3.0201 BEL(EN)

EcoStruxure Power Build Rapsody software Version BEL(EN) 2.8.3.0201

EcoStruxure Power Build Rapsody software INT(EN) 2.8.4.0300 and prior

2.8.4.0401 INT(EN)

EcoStruxure Power Build Rapsody software Version INT(EN) 2.8.4.0401

EcoStruxure Power Build Rapsody software NL 2.8.2.0000 and prior

2.8.2.000 NL

EcoStruxure Power Build Rapsody software Version NL 2.8.2.000

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user
imports a malicious project file (SSD file) shared by the attacker into Rapsody.

CVE Description

CVSS v4.0 Base Score 4.6 | Medium | [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L)

CVSS 4.0 Score

Versions FR V2.8.1.0401, INT V2.8.6.200, and ES V2.8.5.0301 of EcoStruxure™ Power Build Rapsody includes a fix for the CVE-2025-13844 vulnerability and is available for download here: https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309

Please restart the service after installing the new version.

Versions BEL(NL) V2.8.3.0201 and BEL(FR) V2.8.8.0201 of EcoStruxure™ Power Build Rapsody includes a fix for the CVE-2025-13844 vulnerability, please reach out to the Schneider Electric Customer Care Center for assistance.

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: For CVE-2025-13844: - Only open projects from trusted sources - Ensure use of Malware scans before opening any externally created Project

CVE-2025-13844

CWE-416: Use After Free vulnerability exists that could cause remote code execution when the end user
imports the malicious project file (SSD file) into Rapsody.

CVE Description

CVSS v4.0 Base Score 8.4 | High | [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)

CVSS 4.0 Score

Versions FR V2.8.1.0401, ESP V2.8.5.0301, PT V2.8.7.0101, INT(EN) V2.8.4.0401, and NL V2.8.2.000 of EcoStruxure™ Power Build Rapsody includes a fix for the CVE-2025-13845 vulnerability and are available for download here: https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309

Please restart the service after installing the new version.

Versions BEL(NL)V2.8.3.0201 and BEL(FR) V2.8.8.0201 of EcoStruxure™ Power Build Rapsody includes a fix for the CVE-2025-13845 vulnerability, please reach out to the Schneider Electric Customer Care Center for assistance.

If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: For CVE-2025-13845: - Only open projects from trusted sources - Ensure use of Malware scans before opening any externally created Project

CVE-2025-13845


Public

General Security Recommendations

For More Information

LEGAL DISCLAIMER

About Schneider Electric

Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products.
The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that
provide communication capabilities for remote monitoring and control.
Failure to apply the remediations provided below may risk unauthorized access to your RTU, which could
result in the possibility of denial of service and loss of confidentiality, integrity of the controller.

Overview

The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 ([CVSS v4.0](https://www.first.org/cvss/calculator/4.0)). CVSS v3.1
will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without
incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as
the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer's environment.

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric’s Technical Support at supportRO@se.com if you need assistance.

Summary: Improper Check for Unusual or Exceptional Conditions on Multiple Products - SEVD-2026-041-01 PDF Version

Summary: Improper Check for Unusual or Exceptional Conditions on Multiple Products - SEVD-2026-041-01 CSAF Version

Summary: Recommended Cybersecurity Best Practices

Summary: Original Release

Schneider Electric

SCADAPack™ firmware

SCADAPack™ 47x firmware versions prior to 9.12.2 installed on SCADAPack™ 47x versions prior to R3.4.2

SCADAPack™ 47x firmware version 9.12.2 installed on SCADAPack™ 47x version R3.4.2

SCADAPack™ 47xi firmware versions prior to 9.12.2 installed on SCADAPack™ 47xi versions prior to R3.4.2

SCADAPack™ 47xi firmware version 9.12.2 installed on SCADAPack™ 47xi version R3.4.2

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code
execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP
protocol.

CVE Description

CVSS v4.0 Base Score 9.3 | Critical | [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)

CVSS v4.0  Score

Version R3.4.2 (Firmware version 9.12.2) of SCADAPack™ 47x and
SCADAPack™ 47xi includes a fix for this vulnerability and is available for
download here:
https://www.se.com/ww/en/download/document/RemoteConnect/

Version R3.4.2 of RemoteConnect includes a fix for this vulnerability and is
available for download here:
https://www.se.com/ww/en/download/document/RemoteConnect/

If customers choose not to apply the remediation provided above, they should immediately apply the following
mitigations to reduce the risk of exploit:
Follow the information according to SCADAPack™ Security Guidelines in
section 8.3 Secured Communication. Also, apply the following standard
practices to reduce the risk of exploit:
• Setup network segmentation and implement the RTU firewall service
to block all unauthorized access to services
• Disable the logic debug service.

Follow the information according to SCADAPack™ Security Guidelines in
section 8.3 Secured Communication. Also, apply the following standard
practices to reduce the risk of exploit
• Setup network segmentation and implement the RTU firewall service
to block all unauthorized access to services.
• Disable the logic debug service.

CVE-2026-0667