Skip to content
Sign in
7.5 High

CVE-2025-13957 CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code…

Description

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.

Affected products and versions

Product Affected versions Fixed in
EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Versions not published

Other CVEs of EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)

The 3 CVEs of EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) →
CVE-2026-19233 CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and… 8.6 High CVE-2026-8044 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that… 8.6 High
Track this CVE