Insight Home and Insight Facility

Schneider Electric is aware of a vulnerability in a third-party Real-Time Operating System (RTOS) component
utilized in the Insight Home and Insight Facility products.

The Insight Home https://www.se.com/ww/en/product/865-0330/insighthome-smart-edge-device-for-smaller-residential-systems-with-up-to-6-power-devices/?range=66298-insight-energy-management&selectedNodeId=99009568934 and Insight Facility https://www.se.com/ww/en/product/865-0335/insightfacility-smart-edge-device-for-larger-residential-and-small-commercial-applications/?range=66298-insight-energy-management&selectedNodeId=99009568934 are smart edge devices designed to operate within a secure local
network environment.

Failure to apply the mitigations provided below may risk could result in improper operation of the device and
loss of data.

As outlined in the user manual, users are explicitly instructed to connect these devices to a home router and to
avoid exposing them directly to the internet. Adhering to this guidance significantly reduces the risk associated
with the identified vulnerability. Schneider Electric remains committed to the security and reliability of its
products and continues to monitor and assess potential risks associated with third-party components.