Skip to content
OpenAdvisories
High · 7.8 CVE-2025-2223 EUVD-2025-10431GHSA-pj4r-9g32-mjr7

CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineerin…

Published Apr 9, 2025 · Updated Apr 9, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: ConneXium Network Manager Category: ICS / OT

Description

CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and
Availability of engineering workstation when a malicious project file is loaded by a user from the local system.

Affected products

VendorProductAffectedFixed
Schneider Electric ConneXium Network Manager All Versions —

Advisories 2

References