Skip to content
OpenAdvisories
Critical ICSA-25-153-01 1 CVE

Schneider Electric Wiser Home Automation

Published Jun 3, 2025 · Updated Jun 3, 2025

Vendor: Schneider Electric Product: Wiser AvatarOn 6K Freelocate Product: Wiser Cuadro H 5P Socket

Summary

Successful exploitation of this vulnerability could allow an attacker to inject code or bypass authentication.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-4041

    Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentica…

    Silicon Labs Gecko Bootloader

Revision history

  1. #1

    Initial Publication

References