CVE-2025-2223 — Schneider Electric / ConneXium Network Manager

CVE-2025-2223

Schneider Electric / ConneXium Network Manager PUBLISHED

Description (CNA)

CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when a malicious project file is loaded by a user from the local system.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / ConneXium Network Manager	affected All Versions

CWE

CWE-20

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-098-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-098-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.