Known vulnerabilities in EcoStruxure Power Monitoring Expert

Vendor: Schneider Electric
Software: EcoStruxure Power Monitoring Expert
Software CPE: cpe:2.3:a:schneider_electric:ecostruxure_power_monitoring_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoStruxure Power Monitoring Expert EcoStruxure Power Monitoring Expert is affected by 12 known vulnerabilities: 1 high, 5 medium, 6 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114977 - Server-Side Request Forgery (SSRF)
CVE-2025-54925		 CWE-918 Medium
No
No
 Hotfix_269476_Release_13.1, Hotfix_269509_Release_13.1 08.09.2025 SB20250908107
#VU114976 - Server-Side Request Forgery (SSRF)
CVE-2025-54924		 CWE-918 Medium
No
No
 Hotfix_269476_Release_13.1, Hotfix_269509_Release_13.1 08.09.2025 SB20250908107
#VU114975 - Deserialization of Untrusted Data
CVE-2025-54923		 CWE-502 Medium
No
No
 - 08.09.2025 SB20250908108
#VU114973 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-54927		 CWE-22 Low
No
No
 Hotfix_269476_Release_13.1, Hotfix_269509_Release_13.1 08.09.2025 SB20250908107
#VU114972 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-54926		 CWE-22 Low
No
No
 Hotfix_269476_Release_13.1, Hotfix_269509_Release_13.1 08.09.2025 SB20250908107
#VU113170 - Exposure of resource to wrong sphere
CVE-2025-6788		 CWE-668 Medium
No
No
 Hotfix_199767, Hotfix_256448 23.07.2025 SB2025072320
#VU103599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8401		 CWE-79 Low
No
No
 2020 CU3, 2021 CU1 04.02.2025 SB2025020453
#VU82203 - Deserialization of Untrusted Data
CVE-2023-5391		 CWE-502 High
No
No
 2021 hotfix 145271, 2022 hotfix 145271, 2023 hotfix 145271 18.10.2023 SB2023101845
#VU16651 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-7797		 CWE-601 Low
No
No
 - 20.12.2018 SB2018122113
#VU13020 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-5571		 CWE-601 Low
No
No
 - 24.05.2018 SB2018052426
#VU13021 - Out-of-bounds read
CVE-2016-10395		 CWE-125 Low
No
No
 - 24.05.2018 SB2018052426
#VU24 - Download of Code Without Integrity Check
CVE-2016-2177		 CWE-119 Medium
No
No
 - 24.06.2016 SB2016081301
SB2017013102
SB2018021614
and 19 more