CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when a malicious project file is loaded by a user from the local system.

CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when a malicious project file is loaded by a user from the local system.

Schneider Electric is aware of vulnerabilities in its ConneXium Network Manager software. The ConneXium Network Manager software provides a solution for configuring and monitoring the administrable Schneider Electric devices, including switches, routers, firewalls, ConneXium Wi-Fi devices, and products from various manufacturers. Failure to apply the mitigations below may risk sensitive data disclosure, leading privilege escalation through man-in-the-middle attacks on ConneXion Network Manager, denial of service, and remote code execution on engineering workstations.

Schneider Electric is aware of vulnerabilities in its ConneXium Network Manager software. The ConneXium Network Manager software provides a solution for configuring and monitoring the administrable Schneider Electric devices, including switches, routers, firewalls, ConneXium Wi-Fi devices, and products from various manufacturers. Failure to apply the mitigations below may risk sensitive data disclosure, leading privilege escalation through man-in-the-middle attacks on ConneXion Network Manager, denial of service, and remote code execution on engineering workstations.

May 2025 Update: The CVSS v3.1 vector string was updated.