PT-2025-6804 · Schneider Electric · Enerlin'X Ife Interface

Published 2025-02-13 · Updated 2025-02-13 · CVE-2025-0816

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Schneider Electric - Enerlin’X IFE interface (LV434001) versions All

Description A Denial-of-Service issue exists due to improper input validation, which can be triggered by sending malicious IPV6 packets to the device. This could cause the product to become unavailable.

Recommendations For Schneider Electric - Enerlin’X IFE interface (LV434001) versions All, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-0816

Affected Products

Enerlin'X Ife Interface

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-0816 · Security Note
• https://twitter.com/CVEnew/status/1890046650778857667 · Twitter Post
• https://t.me/cvenotify/111181 · Telegram Post
• https://twitter.com/cybercronai/status/1890084253125247332 · Twitter Post
• https://t.me/latest_high_impact_cve/1827 · Telegram Post
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-04.pdf · Note
• https://t.me/cvedetector/17978 · Telegram Post