Known vulnerabilities in Schneider Electric EcoStruxure™ IT Data Center Expert

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-8045	CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information…	7.1 High	Jun 9, 2026
CVE-2025-50124	A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is…	7.2 High	Jul 11, 2025
CVE-2025-50125	A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code…	6.3 Medium	Jul 11, 2025
CVE-2025-50123	A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command…	7.2 High	Jul 11, 2025
CVE-2025-50122	A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password…	8.9 High	Jul 11, 2025
CVE-2025-50121	A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…	9.5 Critical	Jul 11, 2025
CVE-2025-6438	A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of…	5.9 Medium	Jul 11, 2025