CVE-2025-0815

Summary

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to the device.

Affected Software

VendorProductVersion RangeStatus
Schneider ElectricEnerlin’X IFE interface (LV434001)All versionsaffected
Schneider ElectricEnerlin’X eIFE (LV851001)All versionsaffected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References