Zelio Soft 2

An attacker with local access to a computer running Zelio Soft 2 could execute arbitrary code with the privileges of the user running the software, potentially disrupting engineering work, altering relay logic programs, or exfiltrating automation designs.

Energy sector operations and utilities using Zelio Logic smart relays (SR2/SR3) with engineering workstations running Zelio Soft 2 for programming and configuration. This affects maintenance teams and control system engineers who use the software to design, test, and deploy relay logic programs.

An attacker with local access to an engineering workstation or programming computer exploits a use-after-free or improper input validation flaw in Zelio Soft 2 by tricking an operator into opening a malicious file or project. The vulnerability allows the attacker to execute arbitrary code on that workstation. From there, the attacker could modify relay logic programs before they are downloaded to Zelio Logic smart relays (SR2/SR3), affecting field operations.