7.2
Élevée
CVE-2025-54926 CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker with admin privileges uploads a malicious file over HTTP which then gets executed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure™ Power Monitoring Expert (PME) | Versions non publiées | |
| EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module | Versions non publiées |
Autres CVE de EcoStruxure™ Power Monitoring Expert (PME)
Les 6 CVE de EcoStruxure™ Power Monitoring Expert (PME) →
CVE-2025-11739
CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with…
8.5
Élevée
CVE-2025-54927
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
4.9
Moyenne
CVE-2025-54925
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive…
7.5
Élevée
CVE-2025-54924
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive…
7.5
Élevée