[Control systems] Schneider Electric security advisory (AV25-578)

Serial number: AV25-578
Date: September 9, 2025

On September 9, 2025, Schneider Electric published advisories to address vulnerabilities in the following products:

  • ATS490 Altivar Soft Starter – all versions
  • ATS490 Altivar Soft Starter – all versions
  • ATV340E Altivar Machine Drives – all versions
  • ATV340E Altivar Machine Drives – all versions
  • ATV6000 Medium Voltage Altivar Process Drives – all versions
  • ATV6000 Medium Voltage Altivar Process Drives – all versions
  • ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives – all versions
  • ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives – all versions
  • ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives – all versions
  • ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives – all versions
  • ILC992 InterLink Converter – all versions
  • ILC992 InterLink Converter – all versions
  • Saitel DP RTU – versions 11.06.33 and prior
  • Saitel DR RTU – versions 11.06.29 and prior
  • VW3A3530D: ATVdPAC module – versions prior to v25.0
  • VW3A3530D: ATVdPAC module – versions prior to v25.0
  • VW3A3720 & VW3A3721 Altivar Process Communication Modules – all versions
  • VW3A3720 & VW3A3721 Altivar Process Communication Modules – all versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

Date modified: