Summary
Schneider Electric is aware of vulnerabilities in its Enerlin'X IFE and Enerlin'X eIFE products.
The Enerlin'X IFE and eIFE products https://www.se.com/ww/en/product-range/62413-enerlinx-ife-eife-ifm/#products are used to enable Masterpact, PowerPact, and Compact circuit breakers
to be connected to an Ethernet network.
Failure to apply the provided below may risk Denial of Service, which could result in an attack which leads to
unavailability of the IEC61850 services of the IFE/eIFE products and needs a manual reboot.
Vulnerabilities 3
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…
-
Medium 5.3
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services runni…
Revision history
-
#1.0.0
Original Release
References
-
Enerlin'X IFE and eIFE - SEVD-2025-042-04 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2025-042-04.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/
-
ICS Advisory ICSA-25-079-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B