CVE-2025-2223 Details

A vulnerability allowing improper input validation has been identified in Schneider Electric's ConneXium Network Manager software, all versions. This vulnerability could lead to a loss of confidentiality, integrity, and availability on engineering workstations when a malicious project file is loaded from the local system.

Users are advised to only open project files from trusted sources, verify the integrity of project files using hash checks, encrypt project files when stored, and use secure communication protocols when exchanging files over the network. Additionally, follow workstation, network, and site-hardening guidelines available in the Schneider Electric Recommended Cybersecurity Best Practices document.