Schneider Electric PM8000 Meter Vulnerability Warning

Are you aware of the cybersecurity vulnerabilities affecting Schneider Electric's PM8000 series meters? These advanced devices, crucial for your electrical distribution system, have a software flaw that could allow hackers to take control and execute malicious code. In our latest article, we delve into the implications of this vulnerability and share best practices for firmware updates to safeguard your systems. Discover how APT can assist you in identifying and resolving these risks effectively. Don’t wait until it’s too late—empower yourself with the knowledge to protect your infrastructure. Read on to learn more!

Monday April 10th, 2020 – As part of our focused service, APT helps customers resolve electrical meter cybersecurity vulnerabilities. Recently, Schneider Electric revealed specific vulnerabilities with their PM8000 series meters. So, what does this mean?

Unfortunately, these advanced meters are manufactured with a chipset software flaw, Wind River’s VxWorks TCP/IP Stack, with an exploit that targets the URGENT/11 vulnerabilities. As a result, hackers can take over the meter on your network to run their malicious code. Consequently, this has the potential for a wide-ranging impact across multiple IT and industrial applications.

a picture of a schneider electric device and a monitor

Firmware Updates Best Practices

APT tested processes for upgrading the firmware on these PM8000 meters.

Here’s what we found…

Firstly, you want to physically connect directly to EACH meter’s communication port.
Secondly, ensure your team updates ALL the device firmware packages.
Finally, understand that it takes TIME– The updates takes 2-4 hours per meter (depending on the connection and physical access).

a computer screen that says compressed device upgrade package

What’s the Fix?

APT can help you identify your list of vulnerable meters and provide simple options for resolution:

Upgrade one or a few meters per service visit and resolve this over a defined schedule.
Train (as part of our service) one of the customer’s available technical resources to perform the firmware upgrades themselves.
Handle all the meter firmware upgrades as part of an additional service.

If you have any PM8000 meters and are interested in hardening your electrical distribution system against these threats, contact APT and we’ll get started right away.

Andy Taylor, APT Chief Executive Officer

Share the Post:

What the New ASHRAE/PNNL/NEMA Data Center Framework Means for Facilities Teams

The AI Data Center Energy Performance Framework from ASHRAE is a pivotal tool for facilities teams managing data center infrastructure. With electricity demand from data centers expected to surge by 17% in 2025 and double by 2030, a comprehensive energy management approach is vital. This framework combines thermal management, electrical systems, and best practices to address the complete lifecycle of energy management. As demands for accountability grow, implementing this framework is crucial for compliance and sustainability. Learn how to tackle these challenges effectively.

Your IR Scanning Program Is Compliant — Until It Isn’t

For decades, annual infrared thermography inspections were merely a best practice — but as of January 1, 2023, they are now a mandatory requirement under NFPA 70B. With the stakes higher than ever, facilities teams face challenges like scheduling around load requirements and managing safety concerns during energized work. Fortunately, there’s a better way. APT’s SwitchMon® solution offers continuous, automated monitoring of electrical systems, providing real-time visibility and proactive alerts for developing faults. Discover how this innovative approach not only ensures compliance but also enhances operational efficiency and reduces risks. Ready to transform your compliance strategy?