6.3
Medium
CVE-2025-50125 A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code…
Description
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation of host request header.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure™ IT Data Center Expert 8.3 | 8.3 → latest | No fix stated |
Other CVEs of EcoStruxure™ IT Data Center Expert
The 7 CVEs of EcoStruxure™ IT Data Center Expert →
CVE-2026-8045
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information…
7.1
High
CVE-2025-50124
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is…
7.2
High
CVE-2025-50123
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command…
7.2
High
CVE-2025-50122
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password…
8.9
High