Schneider Electric Zelio Soft 2

An attacker could execute arbitrary code on the engineering workstation running Zelio Soft 2, potentially allowing modification or deletion of control logic for Zelio relays and small PLCs. This could disrupt process control, alter setpoints, or prevent legitimate control operations.

Energy sector operators who use Zelio Soft 2 to program Zelio relays and small programmable logic controllers (PLCs) should be aware that engineering workstations running this software are at risk. This includes municipal utilities, industrial facilities, and any organization using Schneider Electric's Zelio control devices.

An attacker crafts a malicious Zelio Soft 2 project file and tricks an engineer into opening it (via email, file share, or social engineering). When opened, the use-after-free flaw triggers code execution with the privileges of the engineering workstation user. The attacker could then modify or extract the control logic, or use the workstation as a pivot point to access other systems on the network.