Known vulnerabilities in EcoStruxure IT Data Center Expert

Vendor: Schneider Electric
Software: EcoStruxure IT Data Center Expert
Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_it_data_center_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 9
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoStruxure IT Data Center Expert EcoStruxure IT Data Center Expert is affected by 9 known vulnerabilities: 1 high, 1 medium, 7 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124124 - Use of Hard-coded Credentials
CVE-2025-13957		 CWE-798 Low
No
No
 9.1 19.03.2026 SB2026031919
#VU112881 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-50123		 CWE-94 Low
Available
No
 9.0 14.07.2025 SB2025071424
#VU112880 - Server-Side Request Forgery (SSRF)
CVE-2025-50125		 CWE-918 Low
Available
No
 9.0 14.07.2025 SB2025071424
#VU112879 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-50123		 CWE-94 Low
Available
No
 9.0 14.07.2025 SB2025071424
#VU112878 - Improper Privilege Management
CVE-2025-50124		 CWE-269 Low
Available
No
 9.0 14.07.2025 SB2025071424
#VU112877 - Insufficient Entropy
CVE-2025-50122		 CWE-331 Medium
Available
No
 9.0 14.07.2025 SB2025071424
#VU112876 - Server-Side Request Forgery (SSRF)
CVE-2025-50125		 CWE-918 Low
Available
No
 9.0 14.07.2025 SB2025071424
#VU112875 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-50121		 CWE-78 High
Available
No
 9.0 14.07.2025 SB2025071424
#VU112874 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-6438		 CWE-611 Low
Available
No
 9.0 14.07.2025 SB2025071424