ICSA-25-224-03

icsaUScisa_csaf_ot

Schneider Electric EcoStruxure Power Monitoring Expert

view advisory published 2025-08-12

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. Note: There are some instances of PME being deployed in a Managed Service model. EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems. Failure to apply the remediation and/or mitigations provided below may risk deserialization of untrusted data, server-side request forgery and/or path traversal that could result in remote code execution, and/or unauthorized access to sensitive data.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2025-54927US——
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an authenti…
CVE-2025-54926US——
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker wi…
CVE-2025-54925US——
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a mali…
CVE-2025-54924US——
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vul…
CVE-2025-54923US——
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data…
02

references

External citations — patches, advisories, analysis.

03

remediations (62)

  • MitigationEcoStruxure Power Monitoring Expert (PME)

    EcoStruxure Power Monitoring Expert (PME) 2022 version has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit for CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927:• Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm • Ensure PME is running in an isolated network • Deploy and configure the Windows firewall to limit access to appropriate network segments. • Enforce complex password policies. • Review Server Access Permissions • Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. • Identify all accounts with access rights, especially those with elevated privileges or remote access. • Limit access to essential users only. • Revoke access for any user accounts that are not critical for system functionality or daily operations. • Apply the principle of least privilege to ensure users have only the access necessary for their role(s). Customers should also consider upgrading to the latest product offering EcoStruxure Power Monitoring Expert (PME) 2024 R2 to resolve this issue.

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Monitoring Expert (PME)

    EcoStruxure Power Monitoring Expert (PME) 2022 version has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit for CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927:• Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm • Ensure PME is running in an isolated network • Deploy and configure the Windows firewall to limit access to appropriate network segments. • Enforce complex password policies. • Review Server Access Permissions • Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. • Identify all accounts with access rights, especially those with elevated privileges or remote access. • Limit access to essential users only. • Revoke access for any user accounts that are not critical for system functionality or daily operations. • Apply the principle of least privilege to ensure users have only the access necessary for their role(s). Customers should also consider upgrading to the latest product offering EcoStruxure Power Monitoring Expert (PME) 2024 R2 to resolve this issue.

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Monitoring Expert (PME)

    EcoStruxure Power Monitoring Expert (PME) 2022 version has reached its end of life and is no longer supported. Customers should immediately apply the following mitigations to reduce the risk of exploit for CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927:• Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm • Ensure PME is running in an isolated network • Deploy and configure the Windows firewall to limit access to appropriate network segments. • Enforce complex password policies. • Review Server Access Permissions • Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. • Identify all accounts with access rights, especially those with elevated privileges or remote access. • Limit access to essential users only. • Revoke access for any user accounts that are not critical for system functionality or daily operations. • Apply the principle of least privilege to ensure users have only the access necessary for their role(s). Customers should also consider upgrading to the latest product offering EcoStruxure Power Monitoring Expert (PME) 2024 R2 to resolve this issue.

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Monitoring Expert (PME)

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Monitoring Expert (PME)

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • MitigationEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Ensure your deployment of PME has followed the cybersecurity hardening guidelines provided with the product. https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm Ensure PME is running in an isolated network. Deploy and configure the Windows firewall to limit access to appropriate network segments. Enforce complex password policies. Review Server Access Permissions: Conduct an audit of all Windows-authenticated users who currently have access to PME. Repeat this audit of your system periodically. Identify all accounts with access rights, especially those with elevated privileges or remote access. Limit access to essential users. Revoke access for any user accounts that are not critical for system functionality or day-to-day operations. Apply the principle of least privilege to ensure users have only the access needed for their role

    https://product-help.schneider-electric.com/EcoStruxure/Power-Monitoring-Expert-2024/content/2_planning/cybersecurity/cyber-planningrecactions.htm
  • FixedEcoStruxure Power Monitoring Expert (PME)

    Customers should upgrade to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and apply Hotfix_199767_release and Hotfix_273686_release.12.0 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center for assistance applying these hotfixes. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below.

  • FixedEcoStruxure Power Monitoring Expert (PME)

    Customers should upgrade to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and apply Hotfix_199767_release and Hotfix_273686_release.12.0 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center for assistance applying these hotfixes. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below.

  • FixedEcoStruxure Power Monitoring Expert (PME)

    Customers should upgrade to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and apply Hotfix_199767_release and Hotfix_273686_release.12.0 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center for assistance applying these hotfixes. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below.

  • FixedEcoStruxure Power Monitoring Expert (PME)

    Customers should upgrade to the latest product offering EcoStruxure Power Monitoring Expert (PME) 2024 R2 and apply Hotfix_279338_Release_2024R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance with obtaining EcoStruxure Power Monitoring Expert (PME) 2024 R2 and help applying this hotfix. In addition to applying the hotfix noted above, you are encouraged to review the mitigations listed below.

  • FixedEcoStruxure Power Monitoring Expert (PME)

    Customers should upgrade to the latest product offering EcoStruxure Power Monitoring Expert (PME) 2024 R2 and apply Hotfix_279338_Release_2024R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance with obtaining EcoStruxure Power Monitoring Expert (PME) 2024 R2 and help applying this hotfix. In addition to applying the hotfix noted above, you are encouraged to review the mitigations listed below.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023

    Hotfix_199767 and Hotfix_273686_release.12.0 is available for EcoStruxure Power Monitoring Expert (PME) 2023R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023R2 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance applying this hotfix. OR Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance upgrading to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and then help applying the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023

    Hotfix_199767 and Hotfix_273686_release.12.0 is available for EcoStruxure Power Monitoring Expert (PME) 2023R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023R2 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance applying this hotfix. OR Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance upgrading to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and then help applying the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023

    Hotfix_199767 and Hotfix_273686_release.12.0 is available for EcoStruxure Power Monitoring Expert (PME) 2023R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023R2 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance applying this hotfix. OR Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance upgrading to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and then help applying the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023 R2

    Hotfix_199767 and Hotfix_273686_release.12.0 is available for EcoStruxure Power Monitoring Expert (PME) 2023R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023R2 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance applying this hotfix. OR Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance upgrading to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and then help applying the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023 R2

    Hotfix_199767 and Hotfix_273686_release.12.0 is available for EcoStruxure Power Monitoring Expert (PME) 2023R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023R2 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance applying this hotfix. OR Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance upgrading to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and then help applying the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2023 R2

    Hotfix_199767 and Hotfix_273686_release.12.0 is available for EcoStruxure Power Monitoring Expert (PME) 2023R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, and CVE-2025-54927. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023R2 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance applying this hotfix. OR Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2023 as part of your solution. Customers running this version of PME can work with Schneider Electric’s Customer Care Center for assistance upgrading to EcoStruxure Power Monitoring Expert (PME) 2023 R2 and then help applying the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2022 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

  • FixedEcoStruxure Power Operation (EPO) 2024 w/ Advanced Reporting and Dashboards Module installed with EcoStruxure Power Monitoring Expert (PME) Version 2024 R2

    Hotfix_279338_Release_2024R2 is available for EcoStruxure Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center to determine if you are running EcoStruxure Power Monitoring Expert (PME) 2024 OR EcoStruxure Power Monitoring Expert (PME) 2024 R2 as part of your solution. Customers running either of these versions of PME can work with Schneider Electric’s Customer Care Center for assistance to upgrade PME and/or apply the hotfix. Note: Customers who are running EcoStruxure Power Monitoring Expert (PME) 2024 should upgrade to EcoStruxure Power Monitoring Expert (PME) 2024 R2 then apply the hotfix.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan