CVE-2025-0814 — Schneider Electric / Enerlin’X IFE interface (LV434001)

CVE-2025-0814

Schneider Electric / Enerlin’X IFE interface (LV434001) PUBLISHED

Description (CNA)

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services running on the product when malicious IEC61850-MMS packets are sent to the device. The core functionality of the breaker remains intact during the attack.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Enerlin’X IFE interface (LV434001)	affected All versions
Schneider Electric / Enerlin’X eIFE (LV851001)	affected All versions

CWE

CWE-20

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-04.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.