CVE-2024-8518: Schneider Electric Zelio Soft 2

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user.

Affected products

• Schneider Electric Zelio Soft 2: before 5.4.2.2 (fixed in 5.4.2.2)

Published 2024-10-08. Last modified 2026-06-17.