IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2025-133-04 — PrismaSeT Active - Wireless Panel Server

UNKNOWN
CVSS 0.0
Date 2026-10-16T20:32:05+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 13-May-25 Document Reference Number – SEVD-2025-133-04 Page 1 of 3 > Public ## PrismaSeT Active - Wireless Panel Server 13 May 2025 ## Overview Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the PrismaSet Active – Wireless Panel Server. The PrismaSeT Active - Wireless Panel Server product is the latest generation of low-voltage switchboards, natively connected to the cloud. Failure to apply the mitigations provided below may risk unauthorized code execution, which could result in the unavailability of the Prisma SeT Active Wireless Panel Server for Voltage loss monitoring. ## Affected Products and Versions Product Version PrismaSeT Active - Wireless Panel Server All versions ## Vulnerability Details A vulnerability disclosed in the Silicon Labs Gecko Bootloader impacts devices that are used in the PrismaSet Active – Wireless Panel Server. CVE ID: CVE-2023-4041 Additional information about the vulnerability CVE-2023-4041 can be found here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4041 ## Mitigations Affected Product & Version Mitigations PrismaSeT Active -Wireless Panel Server All Versions PrismaSeT Active - Wireless Panel Server product has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit: > • Deactivate Bluetooth Low (BLE) communication of Wireless Panel Server when it is not in use. > • Periodically review audit logs and/or EcoStruxure™ Facility Expert App security notifications to detect unexpected behaviors. > • Regularly check the physical security of the Wireless Panel Server to protect against unauthorized Bluetooth pairing. Schneider Electric Security Notification 13-May-25 Document Reference Number – SEVD-2025-133-04 Page 2 of 3 > Public > •

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2023-4041 0.0 unknown
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass. This issue affects "Standalone" and "Application" versions of Gecko Bootloader.

// Remediations (3)

Mitigation: PrismaSeT Active - Wireless Panel Server product has reached its end of life and is no longer supp
PrismaSeT Active - Wireless Panel Server product has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit: * Deactivate Bluetooth Low (BLE) communication of Wireless Panel Server when it is not in use. * Periodically review audit logs and/or EcoStruxure™ Facility Expert App security notifications to detect unexpected behaviors. * Regularly check the physical security of the Wireless Panel Server to protect against unauthorized Bluetooth pairing. * Use only Schneider Electric official EcoStruxure™ Power Commission App and EcoStruxure™ Facility Expert App available in Google Play Store and Apple App Store. * Do not use EcoStruxure Power Commission App and EcoStruxure™ Facility Expert App in rooted or jail-broken mobile devices. * Follow PrismaSeT Active - Wireless Panel Server Cybersecurity Recommendations https://www.productinfo.schneider-electric.com/wirelesspanelserverguide/viewer?docidentity=TPC_PanelServerCybersecurityRecomme-3453D816&lang=en&extension=xml&manualidentity=UserGuideWirelessPanelServerWHENPUB-5475323F
Mitigation: To stay informed about all updates, including details on affected products and remediation plans, su
To stay informed about all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/securitynotifications.jsp
Patch: The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of lif
The Wiser AvatarOn 6K Freelocate and Wiser Cuadro H 5P Socket products have reached their end of life and are no longer supported. Users should immediately either disable the firmware update in the Zigbee Trust Center or remove the products from service to reduce the risk of exploitation.

// References