PT-2025-6827 · Schneider Electric · Asco 5310 Single-Channel Remote Annunciator

Published 2025-02-13 · Updated 2025-02-18 · CVE-2025-1059

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Schneider Electric - ASCO 5310 Single-Channel Remote Annunciator versions all

Description A vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device. This issue is related to the allocation of resources without limits or throttling.

Recommendations For all versions, consider restricting access to the webserver to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider implementing rate limiting or IP blocking to prevent malicious packets from being sent to the device.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-1059

Affected Products

Asco 5310 Single-Channel Remote Annunciator

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-1059 · Security Note
• https://twitter.com/cybercronai/status/1890114366868959697 · Twitter Post
• https://t.me/latest_high_impact_cve/1827 · Telegram Post
• https://twitter.com/CVEnew/status/1890046661814001972 · Twitter Post
• https://twitter.com/cracbot/status/1891805000705376701 · Twitter Post
• https://t.me/cvedetector/17968 · Telegram Post
• https://download.schneider-electric.com/files?p_Doc_Ref=sevd-2025-042-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-01.pdf · Note