BACK TO NEWS
CERT AdvisoriesLow

Schneider Electric Addresses Critical Zigbee Vulnerabilities in Multiple Products

2 min readSource: CISA Cybersecurity Advisories

CISA advisory reveals denial-of-service flaws in Schneider Electric Zigbee devices using Silicon Labs EmberZNet, impacting Wiser iTRV and other smart systems.

Schneider Electric Responds to Zigbee Protocol Vulnerabilities

Schneider Electric has acknowledged multiple security vulnerabilities in its Zigbee-enabled products, stemming from flaws in Silicon Labs’ EmberZNet protocol stack. The vulnerabilities, disclosed by Silicon Labs, affect several vendors utilizing their Zigbee processors, including Schneider Electric’s Wiser iTRV smart thermostat and other connected devices.

Technical Details

The vulnerabilities, cataloged under CISA advisory ICSA-26-027-03, involve denial-of-service (DoS) risks in Zigbee implementations. While specific CVE identifiers were not disclosed in the initial advisory, the flaws are tied to the underlying EmberZNet stack, which is widely used in industrial and consumer IoT devices. Zigbee, a low-power wireless communication protocol, is commonly deployed in smart home and building automation systems, making these vulnerabilities particularly concerning for operational technology (OT) environments.

Impact Analysis

The identified DoS vulnerabilities could allow threat actors to disrupt device functionality, leading to potential operational downtime or loss of control over affected systems. Given Zigbee’s role in critical infrastructure—such as HVAC, lighting, and energy management—exploitation of these flaws could have cascading effects in smart buildings or industrial settings. Schneider Electric has not reported any active exploitation of these vulnerabilities at this time.

Recommendations

Security teams managing Schneider Electric Zigbee-enabled devices should:

  • Monitor updates from Schneider Electric and Silicon Labs for patches or mitigations.
  • Review network segmentation to isolate Zigbee devices from critical systems.
  • Implement intrusion detection to identify anomalous traffic patterns indicative of DoS attempts.
  • Refer to CISA’s advisory (ICSA-26-027-03) for ongoing guidance and technical details.

For further technical analysis, the CSAF (Common Security Advisory Framework) document is available here.

Share

TwitterLinkedIn