VDB
ICSA-25-203-04
ICSA-25-203-04
PUBLISHED
CVSS 8.100000381469727 HIGH
Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric EcoStruxure Power Operation (EPO) 2024: <=CU1 | ||
| Schneider Electric EcoStruxure Power Operation (EPO) 2022: <=CU6 |
Exploit Intelligence
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-203-04.json (circl)
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-04 (circl)
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices (circl)
- https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf (circl)
- https://www.cisa.gov/topics/industrial-control-systems (circl)
- https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf (circl)
- https://www.cisa.gov/uscert/ncas/tips/ST04-014 (circl)
- https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01 (circl)
- https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf (circl)
- https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b (circl)
…and 8 more exploits
Timeline
- Apr 28, 2025 PoC Published
- Jul 22, 2025 CVE Published
- Feb 25, 2026 CVE Updated
References
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-203-04.json advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-04 advisory
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices url
- https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf url
- https://www.cisa.gov/topics/industrial-control-systems url
- https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf url
- https://www.cisa.gov/uscert/ncas/tips/ST04-014 url
- https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01 url
- https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url
- https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b url
- https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing url
- https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks url
- https://community.se.com/t5/EcoStruxure-Power-Operation/v2022-Release-amp-Updates-Install-Procedure/m-p/491544#M7322 fix
- https://www.se.com/us/en/work/support/contacts.jsp fix
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-189-03.pdf fix
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2025-189-03.json fix
- https://www.se.com/us/en/download/document/7EN52-0390/ fix