Schneider Electric Wiser Home Automation
Successful exploitation of this vulnerability could allow an attacker to inject code or bypass authentication.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4041US | critical9.8OT elevated | — | ||
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-153-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-153-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationWiser AvatarOn 6K Freelocate
To stay informed about all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp
https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp - MitigationWiser Cuadro H 5P Socket
To stay informed about all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp
https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp - FixedWiser AvatarOn 6K Freelocate
The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of life and are no longer supported. Users should immediately either disable the firmware update in the Zigbee Trust Center or remove the products from service to reduce the risk of exploitation.
- FixedWiser Cuadro H 5P Socket
The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of life and are no longer supported. Users should immediately either disable the firmware update in the Zigbee Trust Center or remove the products from service to reduce the risk of exploitation.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan