Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 15:23.

1 Advisories gefunden

SEVD-2025-252-01

Multiple Altivar Process Drives and Communication Modules

Schneider Electric — ATVdPAC module

Schneider Electric CPCERTmiddel

Veröffentlicht

9. September 2025

Letzte Aktualisierung

13. Oktober 2026

Verknüpfte CVEs

Betroffene Sektoren

Risk Evaluation

Schneider Electric is aware of a vulnerability in its [ATVdPAC module](http://www.se.com/ww/en/product/VW3A3530D/atv-dpac-module/) / [ATV6000 Medium Voltage Altivar Process Drives](http://www.se.com/ww/en/product-range/65607-altivar-process-atv6000) / [ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives](http://www.se.com/ww/en/product-range/62317-altivar-process-atv600) / [ATV930/950/955/960/980/9A0/9B0/9L0 Altivar Process Drives](http://www.se.com/ww/en/product-range/63124-altivar-process-atv900) / [ATV340E Altivar Machine Drives](http://www.se.com/ww/en/product-range/63441-altivar-machine-atv340#products) /[ATS490 Altivar Soft Starter](http://www.se.com/ww/en/product-range/213421154-altivar-soft-starter-ats490) / [Altivar Process Communication Modules](http://www.se.com/ww/en/product-range/62317-altivar-process-atv600/117623851529-modular-drives-apm) product(s). Failure to apply remediation mitigations provided below may risk Cross-Site Scripting, which could result in partial loss of confidentiality and integrity of the workstation running a Web browser.

Zusammenfassung der Gegenmaßnahmen

Version 25.0 of VW3A3530D: ATVdPAC module includes a fix for this vulnerability and is available upon request from Schneider Electric's [Customer Care Center](https://www.se.com/us/en/work/support/contacts.jsp).

Revisionshistorie (4)
  1. Erstveröffentlichung — 9. September 2025

    Original Release

  2. Update A — 16. September 2025

    Fixed the typo on the product name Altivar Process Communication Modules.

  3. Update B — 14. Oktober 2025

    Remediations are now available for ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives, ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives and ATV340E Altivar Machine Drives.

  4. Update C — 9. Dezember 2025

    Remediations are now available for ATS490 Altivar Soft Starter.

Offizielle Quelle: Schneider Electric CPCERT