AI Summary

Schneider Electric has issued a security advisory for its Plant iT/Brewmaxx software. Versions 9.60 and above are affected by four CVEs (CVE‑2025‑49844, CVE‑2025‑46817, CVE‑2025‑46818, CVE‑2025‑46819) that enable privilege escalation and remote code execution. The vulnerabilities involve use‑after‑free, integer overflow or wraparound, and code injection through Redis, an open‑source in‑memory database. The affected product is used worldwide in critical infrastructure sectors such as energy, manufacturing, and commercial facilities. The advisory urges users to update to patched versions to mitigate the high‑severity risks.

AI summaries can be wrong sometimes—always verify important details using the source article.