Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 23:37.

1 Advisories gefunden

SEVD-2026-069-06

Deserialization of Untrusted Data vulnerability on Multiple Products

Schneider Electric — EcoStruxure™ Power Monitoring Expert (PME) 2022

Schneider Electric CPCERThoch

Veröffentlicht

10. März 2026

Letzte Aktualisierung

10. März 2026

Verknüpfte CVEs

Betroffene Sektoren

Risk Evaluation

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. EcoStruxure™ Power Operation (EPO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems.Failure to apply the fix provided below may risk local arbitrary code execution, which could result in the local system being compromised, a disruption of operations, and/or unauthorized administrative control of the system.

Zusammenfassung der Gegenmaßnahmen

Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) that includes a fix for this vulnerability. Contact Schneider Electric’s Customer Care Center to download this hotfix. No reboot required.

Revisionshistorie (1)
  1. Erstveröffentlichung — 10. März 2026

    Original Release

Offizielle Quelle: Schneider Electric CPCERT