IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2025-042-04 — Enerlin’X IFE and eIFE

MEDIUM
CVSS 6.5
Date 2026-10-16T20:32:40+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 11-Feb-25 Document Reference Number – SEVD-2025-042-04 Page 1 of 4 # Enerlin’X IFE and eIFE 11 February 2025 ## Overview Schneider Electric is aware of vulnerabilities in its Enerlin’X IFE and Enerlin’X eIFE products. The Enerlin’X IFE and eIFE products are used to enable Masterpact, PowerPact, and Compact circuit breakers to be connected to an Ethernet network. Failure to apply the provided below may risk Denial of Service, which could result in an attack which leads to unavailability of the IEC61850 services of the IFE/eIFE products and needs a manual reboot. ## Affected Products and Versions Product Version Enerlin’X IFE interface (LV434001) Enerlin’X eIFE (LV851001) All Versions ## Vulnerability Details CVE ID: CVE-2025-0816 CVSS v3.1 Base Score 6.5 | Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS v4.0 Base Score 7.1 | High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device. CVE ID: CVE-2025-0815 CVSS v3.1 Base Score 6.5 | Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS v4.0 Base Score 7.1 | High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to the device. CVE ID: CVE-2025-0814 CVSS v3.1 Base Score 5.3 | Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS v4.0 Base Score 6.9 | Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

// Vulnerabilities (3)

CVE ID CVSS Score Severity Description
CVE-2025-0814 6.5 medium
CVE-2025-0814. CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services running on the product when malicious IEC61850-MMS packets are sent to the device. The core functionality of the breaker remains intact during the attack.
CVE-2025-0816 6.5 medium
CVE-2025-0816. CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device.
CVE-2025-0815 6.5 medium
CVE-2025-0815. CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to the device.

// Remediations (2)

Patch: Version 004.010.000 of Enerlin'X IFE and eIFE includes a fix for this vulnerability. Download the
Version 004.010.000 of Enerlin'X IFE and eIFE includes a fix for this vulnerability. Download the latest version of the EcoStruxure Power Commission tool available here: https://www.se.com/ww/en/product-range/62980-ecostruxure-powercommission/#overview to install the latest firmware version of the Enerlin'X IFE and eIFE.
Mitigation: If customers choose not to apply the remediation provided above, they should immediately apply the f
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Customers should immediately apply the following mitigations to reduce the risk of exploit: * Use devices only in a protected environment to minimize network exposure and ensure that they are not accessible from public internet or untrusted networks. * Setup network segmentation and implement a firewall to block all unauthorized access to ports supported by the product and listed in the user guide: https://www.se.com/ww/en/download/document/DOCA0084EN/ Configure the Access Control List following the recommendations of the Cybersecurity Guide: https://www.se.com/ww/en/download/document/DOCA0122EN/ and the user guide: https://www.se.com/ww/en/download/document/DOCA0084EN/ To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/security-notifications.jsp

// References