Looking for How to Fix Telerik.dll Vulnerability (CVE-2025-3600)

[ykim3399]

 

There is Telerik.dll Vulnerability (CVE-2025-3600) in Schneider Electric Power Monitoring Expert.

According to customer company's captured picture, it looks like that new file (version >= 2025.1.416) should be installed.

It is not easy for me to fix this situation because I didn't expect to see Telerik.dll vulnerability problem in PME task.

I'm looking for your methods or advices for fixing this problem in EcoStruxure Power Monitoring Expert.

[Charles_Murison]

Hello @ykim3399 ,

Schneider will usually comment on cyber Security topics through a specific portal. https://www.se.com/ww/en/work/support/cybersecurity/report-a-vulnerability/
Likely you will need to log a case with technical support who will then need to report to internal Schneider teams. Helpful information to include to tech support include:

• Email​
• Phone number​
• Country​
• Organization name​
• Product Line
• ​Vulnerable Version​
• Vulnerability type [CWE ID if available]​
• Scanning tool used if possible

Regards,

Charles