Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 22:36.

Filters

1 actief
Reset filters

1 advisories gevonden

SEVD-2026-069-06

Deserialization of Untrusted Data vulnerability on Multiple Products

Schneider Electric — EcoStruxure™ Power Monitoring Expert (PME) 2022

Schneider Electric CPCERThoog

Gepubliceerd

10 maart 2026

Laatste update

10 maart 2026

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. EcoStruxure™ Power Operation (EPO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems.Failure to apply the fix provided below may risk local arbitrary code execution, which could result in the local system being compromised, a disruption of operations, and/or unauthorized administrative control of the system.

Mitigatiesamenvatting

Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) that includes a fix for this vulnerability. Contact Schneider Electric’s Customer Care Center to download this hotfix. No reboot required.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 10 maart 2026

    Original Release

Officiële bron: Schneider Electric CPCERT