Schneider Electric EcoStruxture IT Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ IT Data Center Expert (DCE) product. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipment. Failure to apply the remediation provided below may risk information disclosure, and remote compromise of the offer which could result in disruption of operations and access to system data.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-50125US | — | — | ||
A
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote
code execution when the server is accessed via the network with knowle… | ||||
| CVE-2025-50124US | — | — | ||
A
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the
server is accessed by a privileged account via a console and throu… | ||||
| CVE-2025-50123US | — | — | ||
A
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote
command execution by a privileged account when the server is acces… | ||||
| CVE-2025-50122US | — | — | ||
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the
password generation algorithm is reverse engineered with access to installati… | ||||
| CVE-2025-50121US | — | — | ||
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability exists that could cause unauthenticated remote code execution whe… | ||||
| CVE-2025-6438US | — | — | ||
A
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could
cause manipulation of SOAP API calls and XML external entities injection res… | ||||
references
External citations — patches, advisories, analysis.
- EcoStruxure™ IT Data Center Expert - SEVD-2025-189-01 CSAF Versionself
- EcoStruxure™ IT Data Center Expert - SEVD-2025-189-01 PDF Versionself
- ICS Advisory ICSA-25-203-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-203-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationEcoStruxure™ IT Data Center Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Harden the DCE instance according to the cybersecurity best practices documented in the EcoStruxure™ IT Data Center Expert Security Handbook
https://community.se.com/t5/DCE-Security/EcoStruxure-IT-Data-Center-Expert-Security-Handbook/ta-p/446553 - MitigationEcoStruxure™ IT Data Center Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Harden the DCE instance according to the cybersecurity best practices documented in the EcoStruxure™ IT Data Center Expert Security Handbook
https://community.se.com/t5/DCE-Security/EcoStruxure-IT-Data-Center-Expert-Security-Handbook/ta-p/446553 - MitigationEcoStruxure™ IT Data Center Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Harden the DCE instance according to the cybersecurity best practices documented in the EcoStruxure™ IT Data Center Expert Security Handbook
https://community.se.com/t5/DCE-Security/EcoStruxure-IT-Data-Center-Expert-Security-Handbook/ta-p/446553 - MitigationEcoStruxure™ IT Data Center Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Harden the DCE instance according to the cybersecurity best practices documented in the EcoStruxure™ IT Data Center Expert Security Handbook
https://community.se.com/t5/DCE-Security/EcoStruxure-IT-Data-Center-Expert-Security-Handbook/ta-p/446553 - MitigationEcoStruxure™ IT Data Center Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Harden the DCE instance according to the cybersecurity best practices documented in the EcoStruxure™ IT Data Center Expert Security Handbook
https://community.se.com/t5/DCE-Security/EcoStruxure-IT-Data-Center-Expert-Security-Handbook/ta-p/446553 - MitigationEcoStruxure™ IT Data Center Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Harden the DCE instance according to the cybersecurity best practices documented in the EcoStruxure™ IT Data Center Expert Security Handbook
https://community.se.com/t5/DCE-Security/EcoStruxure-IT-Data-Center-Expert-Security-Handbook/ta-p/446553 - FixedEcoStruxure™ IT Data Center Expert
Version 9.0 of EcoStruxure™ IT Data Center Expert includes fixes for these vulnerabilities and is available upon request from Schneider Electric’s Customer Care Center.
- FixedEcoStruxure™ IT Data Center Expert
Version 9.0 of EcoStruxure™ IT Data Center Expert includes fixes for these vulnerabilities and is available upon request from Schneider Electric’s Customer Care Center.
- FixedEcoStruxure™ IT Data Center Expert
Version 9.0 of EcoStruxure™ IT Data Center Expert includes fixes for these vulnerabilities and is available upon request from Schneider Electric’s Customer Care Center.
- FixedEcoStruxure™ IT Data Center Expert
Version 9.0 of EcoStruxure™ IT Data Center Expert includes fixes for these vulnerabilities and is available upon request from Schneider Electric’s Customer Care Center.
- FixedEcoStruxure™ IT Data Center Expert
Version 9.0 of EcoStruxure™ IT Data Center Expert includes fixes for these vulnerabilities and is available upon request from Schneider Electric’s Customer Care Center.
- FixedEcoStruxure™ IT Data Center Expert
Version 9.0 of EcoStruxure™ IT Data Center Expert includes fixes for these vulnerabilities and is available upon request from Schneider Electric’s Customer Care Center.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan