[Control systems] Schneider Electric security advisory (AV25-125)

Number: AV25-125
Date: March 11, 2025

On March 11, 2025, Schneider Electric published advisories to address vulnerabilities in multiple products. Included were updates for the following products:

  • EcoStruxure Panel Server – version v2.0 and prior
  • EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions – versions v2.1 to v2.9
  • WebHMI – version v4.1.0.0 and prior

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: