Improper Input Validation in Schneider Electric Network Devices

CVE-2025-0814

Summary

An improper input validation vulnerability exists in certain Schneider Electric network devices, allowing attackers to send malicious IEC61850-MMS packets. When exploited, this vulnerability could lead to a Denial-of-Service condition, disrupting network services on affected devices. It is important to note that while the network services may be impacted, the core functionality of the device remains operational during such attacks, posing a risk of service disruption without complete device failure.

References