Schneider Electric Products Denial-of-Service Vulnerability via Malicious IEC61850-MMS Packets

A denial-of-service vulnerability has been identified in certain Schneider Electric products, caused by improper input validation. When malicious IEC61850-MMS packets are sent to the device, network services can be disrupted, leading to a denial-of-service condition. However, the core functionality of the device remains unaffected during the attack.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing disruption of network services on the affected device.

Remediation

Users are advised to consult the Security and Safety Notice SEVD-2025-042-04 for guidance on addressing this vulnerability.