Insecure Initialization Vulnerability in Schneider Electric Products

CVE-2025-2441

What is CVE-2025-2441?

An insecure initialization vulnerability exists in Schneider Electric radio devices, where a malicious user with physical access can exploit the factory default settings. This flaw may lead to an inadvertent exposure of sensitive data and a potential loss of confidentiality, as the products do not properly initialize all data upon reset. Organizations must ensure appropriate security measures are in place to mitigate this risk.

References