OTPulse

Schneider Electric NetBotz 5 750/755

MonitorCVSS 6.4ICS-CERT ICSA-26-260-05Aug 11, 2026
Schneider ElectricEnergy
Attack path
Attack VectorAdjacent
Auth RequiredHigh
ComplexityHigh
User InteractionNone needed
Summary

Schneider Electric NetBotz 5 750 and 755 products contain multiple vulnerabilities (CWE-78 command injection, CWE-564 file/pathname handling) that could allow an attacker with local network access and administrative credentials to execute arbitrary code. The NetBotz 5 750/755 devices monitor temperature, humidity, leak detection, smoke, vibration, door contact, and video surveillance in facilities. Successful exploitation could lead to device manipulation, data theft, and loss of environmental monitoring and alerting capabilities.

What this means
What could happen
An attacker with local network access and high privileges could execute arbitrary code on the NetBotz appliance, allowing them to manipulate environmental monitoring data, disable alerts for temperature or water intrusion events, or prevent security cameras from recording.
Who's at risk
Energy sector operators and facility managers who rely on NetBotz 5 750 or 755 environmental and security monitoring appliances to track temperature, humidity, water intrusion, and video surveillance in data centers, network closets, or critical infrastructure buildings.
How it could be exploited
An attacker on the local network with administrative credentials could exploit command injection or file manipulation vulnerabilities (CWE-78, CWE-564) in the NetBotz 5 device to run arbitrary commands, potentially compromising the monitoring and alerting functions that protect data center or facility infrastructure.
Prerequisites
  • Network access to the NetBotz 5 device from the local network
  • High-privilege (administrative) credentials on the NetBotz 5 device
  • Interaction with a function that accepts user input (likely web interface or management console)
Local network access requiredHigh privileges requiredCan lead to code executionAffects critical facility monitoring
Exploitability
Unlikely to be exploited — EPSS score 0.6%
Affected products (2)
2 with fix
ProductAffected VersionsFix Status
NetBotz 5 750≤ 5.5.25.6.0
NetBotz 5 755≤ 5.5.25.6.0
Remediation & Mitigation
0/4
Do now
0/2
HARDENINGRestrict network access to NetBotz 5 management interfaces to authorized personnel only; use firewall rules to limit connections to known engineering workstations
HARDENINGReview and enforce strong, unique administrative credentials on all NetBotz 5 devices; disable default accounts if present
Schedule — requires maintenance window
0/2

Patching may require device reboot — plan for process interruption

NetBotz 5 750
HOTFIXUpdate NetBotz 5 750 and 755 devices to firmware version 5.6.0 or later
All products
HOTFIXVerify successful firmware installation by logging into the NetBotz GUI and confirming the version in the 'About NetBotz' section
View full CISA ICS-CERT advisory
API: /api/v1/advisories/969044cb-7e35-4875-8637-6324f4764237

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.

Schneider Electric NetBotz 5 750/755 | CVSS 6.4 - OTPulse