ICSA-26-027-03
·
Published 2026-01-27
·
View on CISA ICS-CERT ↗
Schneider Electric Zigbee Products
CVSS 6.5
MEDIUM
Remediations
- Customers should immediately apply the following mitigations to reduce the risk of exploit: To keep your Zigbee network safe and prevent unauthorized access: • Restrict device access: Do not allow unknown devices to join your network. • Review hub settings: Check how your Zigbee hub manages device pairing. • Control network availability: Only open the network when adding new devices and close it immediately after. • Use install codes and avoid the well-known key: Whenever possible, use unique install codes for added security. Replace default keys with secure, unique keys.
Affected Vendors
Schneider Electric
Affected Products (34)
Schneider Electric
·
Wiser iTRV2
vers:all/*
Schneider Electric
·
Wiser iTRV3
vers:all/*
Schneider Electric
·
Wiser RTR2
vers:all/*
Schneider Electric
·
Wiser UFH
vers:all/*
Schneider Electric
·
Wiser 16A Electrical Heat Switch
vers:all/*
Schneider Electric
·
Wiser Boiler Relay
vers:all/*
Schneider Electric
·
Exxact cFMT 16a
vers:all/*
Schneider Electric
·
Elko cFMT 16a
vers:all/*
Schneider Electric
·
Odace cFMT 2a
vers:all/*
Schneider Electric
·
Merten cFMT 16a
vers:all/*
Schneider Electric
·
Merten cFMT 2a
vers:all/*
Schneider Electric
·
Wiser Power Micromodule
vers:all/*
Schneider Electric
·
Wiser FIP Micromodule
vers:all/*
Schneider Electric
·
Iconic, Wiser Connected Smart Dimmer
vers:all/*
Schneider Electric
·
Iconic, Wiser Connected Smart Switch, 2AX
vers:all/*
Schneider Electric
·
Iconic, Wiser Connected Smart Switch, 10AX
vers:all/*
Schneider Electric
·
Iconic, Connected AC Fan Controller
vers:all/*
Schneider Electric
·
Iconic, Connected Smart Socket
vers:all/*
Schneider Electric
·
Wiser Connected Application Module 1-Gang
vers:all/*
Schneider Electric
·
Wiser Connected Application Module 2-Gang
vers:all/*
Schneider Electric
·
Wiser Connected Push Button Dimmer
vers:all/*
Schneider Electric
·
Wiser Connected Push Button Switch
vers:all/*
Schneider Electric
·
Wiser Connected Push Button Shutter
vers:all/*
Schneider Electric
·
Wiser Connected Motion Dimmer
vers:all/*
Schneider Electric
·
Wiser Connected Motion Switch
vers:all/*
Schneider Electric
·
Wiser Connected Rotary Dimmer
vers:all/*
Schneider Electric
·
Connected Wireless Switch
vers:all/*
Schneider Electric
·
Micromodule Switch
vers:all/*
Schneider Electric
·
Micromodule Dimmer
vers:all/*
Schneider Electric
·
Micromodule Shutter
vers:all/*
Schneider Electric
·
Connected Single Socket Outlet
vers:all/*
Schneider Electric
·
Connected Double Socket Outlet
vers:all/*
Schneider Electric
·
Fuga Connected Socket Outlet
vers:all/*
Schneider Electric
·
Mureva EV Link
vers:all/*
Affected Sectors
Commercial Facilities, Critical Manufacturing, Energy, Information Technology, Transportation Systems
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more