Summary
Schneider Electric is aware of a vulnerability in its PowerLogic™ P7 product.
The PowerLogic™ P7 is a protection and control platform designed for complex and advanced electrical
network applications.
Failure to apply the remediation provided below may risk unauthorized execution of privileged commands or
loss of HMI operability and configuration functionality, which could result in loss of control over system
operations and disruption of critical services.
Vulnerabilities 3
-
High 8.7
CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the dev…
-
High 8.6
CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that coul…
-
Medium 6.9
CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-serv…
Revision history
-
#2
Initial CISA Republication of Schneider Electric CPCERT SEVD-2026-160-03 advisory
-
#1
Original Release
References
-
Multiple Vulnerabilities on PowerLogic™ P7 - SEVD-2026-160-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390
-
ICS Advisory ICSA-26-176-07 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-07
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b