Description
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network
services running on the product when malicious IEC61850-MMS packets are sent to the device. The core
functionality of the breaker remains intact during the attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Enerlin’X IFE interface (LV434001) | All versions | — |
| Schneider Electric | Enerlin’X eIFE (LV851001) | All versions | — |
Advisories 2
- ICSA-25-079-02 Schneider Electric Enerlin’X IFE and eIFE CISA ICS & IT advisories · Feb 11, 2025
- SEVD-2025-042-04 Enerlin'X IFE and eIFE Schneider Electric CPCERT · Feb 11, 2025