[Control systems] Schneider Electric security advisory (AV25-328)

Serial number: AV25-328
Date: June 10, 2025

On June 10, 2025, Schneider Electric published advisories to address vulnerabilities in the following products:

• EVLink WallBox – all versions
• Insight Facility – all versions
• Insight Home – all versions
• Modicon Controllers M241/M251 – versions prior to 5.3.12.51
• Modicon Controllers M262 – versions prior to 5.3.9.18
• Modicon Controllers M258/LMC058 – all versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Schneider Electric Security Notifications - EVLink WallBox (PDF)
• Schneider Electric Security Notifications - Insight Home and Insight Facility (PDF)
• Schneider Electric Security Notifications - Modicon Controllers M241/M251/M258/LMC058/M262 (PDF)
• Schneider Electric Security Notifications