other
Schneider Electric's product security incident response team, responsible for investigating and disclosing vulnerabilities in the company's products.
No evidence-backed relationships are recorded.
CISA's ICSA-26-260-04 gives fixed firmware for four of the six affected Schneider parts and lists the BMXNGD0100 and BMXNOC0401 as affected in every version, with a remediation plan for those still being written.
Reality
CVE-2026-13348 lets an attacker try passwords against the software that shuts servers down gracefully, as fast as the network allows. Schneider fixed it in version 1.6. CISA's advisory lists 1.6 as affected too.
Reality
Schneider Electric's NetBotz 5 750 and 755 environmental monitors execute operating system commands from a maliciously modified backup file, and firmware 5.6.0 closes that hole along with an authenticated SQL injection.
Reality