Schneider Electric PrismaSeT Active - Wireless Panel Server
Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the PrismaSet Active - Wireless Panel Server. The PrismaSeT Active - Wireless Panel Server https://www.se.com/ww/en/product-range/39982243-prismaset-p-active/#products product is the latest generation of low-voltage switchboards, natively connected to the cloud. Failure to apply the mitigations provided below may risk unauthorized code execution, which could result in the unavailability of the Prisma SeT Active Wireless Panel Server for Voltage loss monitoring.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4041US | critical9.8OT elevated | — | ||
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader… | ||||
references
External citations — patches, advisories, analysis.
- Schneider Electric PrismaSeT Active - Wireless Panel Server - SEVD-2025-133-04 CSAF Versionself
- Schneider Electric PrismaSeT Active - Wireless Panel Server - SEVD-2025-133-04 PDF Versionself
- ICS Advisory ICSA-25-140-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-140-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (1)
- MitigationPrismaSeT Active - Wireless Panel Server
PrismaSeT Active - Wireless Panel Server product has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit: * Deactivate Bluetooth Low (BLE) communication of Wireless Panel Server when it is not in use. * Periodically review audit logs and/or EcoStruxure™ Facility Expert App security notifications to detect unexpected behaviors. * Regularly check the physical security of the Wireless Panel Server to protect against unauthorized Bluetooth pairing. * Use only Schneider Electric official EcoStruxure™ Power Commission App and EcoStruxure™ Facility Expert App available in Google Play Store and Apple App Store. * Do not use EcoStruxure Power Commission App and EcoStruxure™ Facility Expert App in rooted or jail-broken mobile devices. * Follow PrismaSeT Active - Wireless Panel Server Cybersecurity Recommendations https://www.productinfo.schneider-electric.com/wirelesspanelserverguide/viewer?docidentity=TPC_PanelServerCybersecurityRecomme-3453D816&lang=en&extension=xml&manualidentity=UserGuideWirelessPanelServerWHENPUB-5475323F
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan