CVE-2025-0814

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services running on the product when malicious IEC61850-MMS packets are sent to the device. The core functionality of the breaker remains intact during the attack.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - cybersecurity@se.com

Published

2025-02-13

Last modified

2025-02-13

Weaknesses

CWE-20

Affected products

• Enerlinx Eife Lv851001 (Schneider Electric)
• Enerlinx Ife Interface Lv434001 (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_…