Skip to content
OpenAdvisories
Critical ICSA-25-140-06 1 CVE

Schneider Electric PrismaSeT Active - Wireless Panel Server

Published May 13, 2025 · Updated May 13, 2025

Vendor: Schneider Electric Product: PrismaSeT Active - Wireless Panel Server

Summary

Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the
PrismaSet Active - Wireless Panel Server.

The PrismaSeT Active - Wireless Panel Server https://www.se.com/ww/en/product-range/39982243-prismaset-p-active/#products product is the latest generation of low-voltage switchboards,

natively connected to the cloud.
Failure to apply the mitigations provided below may risk unauthorized code execution, which could result in the
unavailability of the Prisma SeT Active Wireless Panel Server for Voltage loss monitoring.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-4041

    Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentica…

    Silicon Labs Gecko Bootloader

Revision history

  1. #1.0.0

    Original Release

References