Code Integrity Issue in Schneider Electric's Firmware
CVE-2025-1058

7.2HIGH

Key Information:

Vendor
Schneider Electric
Status
Asco 5310 Single-channel Remote Annunciator
Asco 5350 Eight Channel Remote Annunciator
Vendor
CVE Published:
13 February 2025

Summary

A significant vulnerability exists in Schneider Electric's firmware that allows the download of malicious firmware without integrity checks. This flaw could potentially render affected devices inoperable, exposing them to risks if exploited by cybercriminals.

Affected Version(s)

ASCO 5310 Single-Channel Remote Annunciator All versions

ASCO 5350 Eight Channel Remote Annunciator All versions

References

https://download.schneider-electric.com/files?p_Doc_Ref=s...

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.