PT-2025-15685 · Schneider Electric · Connexium Network Manager

CVE-2025-2223

·

Published

2025-04-08

·

Updated

2025-04-14

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined.
Description: A vulnerability exists due to improper input validation, potentially causing a loss of confidentiality, integrity, and availability when a malicious project file is loaded by a user from the local system. This could lead to data breaches.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-04904
CVE-2025-2223

Affected Products

Connexium Network Manager