8.7
High
CVE-2025-54923 CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of…
Description
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure™ Power Monitoring Expert (PME) | Versions not published | |
| EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module | Versions not published |
Other CVEs of EcoStruxure™ Power Monitoring Expert (PME)
The 6 CVEs of EcoStruxure™ Power Monitoring Expert (PME) →
CVE-2025-11739
CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with…
8.5
High
CVE-2025-54927
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
4.9
Medium
CVE-2025-54926
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
7.2
High
CVE-2025-54925
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive…
7.5
High