IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2025-133-02 — Wiser Home Automation

UNKNOWN
CVSS 0.0
Date 2026-10-16T20:31:59+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 13-May-25 Document Reference Number – SEVD-2025-133-02 Page 1 of 3 > Public ## Wiser Home Automation 13 May 2025 Overview Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products. The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket are home automation products. Failure to apply the mitigations provided below may risk buffer overflow vulnerability, which could result in persistent code execution of the attacker’s code. Affected Products and Versions Product Version Wiser AvatarOn 6K Freelocate All versions Wiser Cuadro H 5P Socket All versions Vulnerability Details A vulnerability disclosed the Silicon Labs Gecko Bootloader impacts devices that are used in the Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products. CVE ID: CVE-2023-4041 Additional information about the vulnerability CVE-2023-4041 can be found here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4041 Schneider Electric Security Notification 13-May-25 Document Reference Number – SEVD-2025-133-02 Page 2 of 3 > Public Mitigations Affected Product & Version Mitigations Wiser AvatarOn 6K Freelocate Wiser Cuadro H 5P Socket All versions The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of life and are no longer supported. Customers should immediately either disable the firmware update in the Zigbee Trust Center or remove the products from service to reduce the risk of exploit. To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric’s security notification service here: https://www.se.com/en/work/support/cybersecurity/security-notifications.jsp General Security Recommendations We strongly recommend the following industry cybersecurity best practices.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2023-4041 0.0 unknown
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass. This issue affects "Standalone" and "Application" versions of Gecko Bootloader.

// Remediations (3)

Mitigation: PrismaSeT Active - Wireless Panel Server product has reached its end of life and is no longer supp
PrismaSeT Active - Wireless Panel Server product has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit: * Deactivate Bluetooth Low (BLE) communication of Wireless Panel Server when it is not in use. * Periodically review audit logs and/or EcoStruxure™ Facility Expert App security notifications to detect unexpected behaviors. * Regularly check the physical security of the Wireless Panel Server to protect against unauthorized Bluetooth pairing. * Use only Schneider Electric official EcoStruxure™ Power Commission App and EcoStruxure™ Facility Expert App available in Google Play Store and Apple App Store. * Do not use EcoStruxure Power Commission App and EcoStruxure™ Facility Expert App in rooted or jail-broken mobile devices. * Follow PrismaSeT Active - Wireless Panel Server Cybersecurity Recommendations https://www.productinfo.schneider-electric.com/wirelesspanelserverguide/viewer?docidentity=TPC_PanelServerCybersecurityRecomme-3453D816&lang=en&extension=xml&manualidentity=UserGuideWirelessPanelServerWHENPUB-5475323F
Mitigation: To stay informed about all updates, including details on affected products and remediation plans, su
To stay informed about all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp
Patch: The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of lif
The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of life and are no longer supported. Users should immediately either disable the firmware update in the Zigbee Trust Center or remove the products from service to reduce the risk of exploitation.

// References