Ecostruxure Power Monitoring Expert (Schneider-electric) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2026-03-10. Vendor: Schneider-electric.
CVEs of Ecostruxure Power Monitoring Expert
- CVE-2025-11739 - CVSS 8.5 (high), 2026-03-10: CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally…
- CVE-2024-2229 - CVSS 7.8 (high), 2024-03-18: CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious project file is loaded into the…
- CVE-2023-5987 - CVSS 6.1 (medium), 2023-11-15: A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross…
- CVE-2023-5986 - CVSS 8.2 (high), 2023-11-15: A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By…
- CVE-2023-5391 - CVSS 9.8 (critical), 2023-10-04: A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a…
- CVE-2023-28003 - CVSS 8.8 (high), 2023-04-18: A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME…
- CVE-2022-22804 - CVSS 5.4 (medium), 2022-02-04: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker…
- CVE-2022-22727 - CVSS 8.8 (high), 2022-02-04: A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of…
- CVE-2022-22726 - CVSS 6.5 (medium), 2022-02-04: A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited…
- CVE-2021-22827 - CVSS 8.8 (high), 2022-01-28: A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected…
- CVE-2021-22826 - CVSS 8.8 (high), 2022-01-28: A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected…
- CVE-2020-7546 - CVSS 5.4 (medium), 2020-12-01: A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA…
- CVE-2020-7545 - CVSS 7.2 (high), 2020-12-01: A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for…
- CVE-2020-7547 - CVSS 8.8 (high), 2020-12-01: A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for…
- CVE-2018-7797 - CVSS 6.1 (medium), 2018-12-17: A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2…
