5.9
Medium
CVE-2025-6438 A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of…
Description
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls and XML external entities injection resulting in unauthorized file access when the server is accessed via the network using an application account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure™ IT Data Center Expert 8.3 | 8.3 → latest | No fix stated |
Other CVEs of EcoStruxure™ IT Data Center Expert
The 7 CVEs of EcoStruxure™ IT Data Center Expert →
CVE-2026-8045
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information…
7.1
High
CVE-2025-50124
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is…
7.2
High
CVE-2025-50125
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code…
6.3
Medium
CVE-2025-50123
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command…
7.2
High