Ecostruxure Power Monitoring Expert Pme (Schneider Electric) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-10. Vendor: Schneider Electric.
CVEs of Ecostruxure Power Monitoring Expert Pme
- CVE-2025-11739 - CVSS 8.5 (high), 2026-03-10: CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally…
- CVE-2025-54923 - CVSS 8.7 (high), 2025-08-20: CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated…
- CVE-2025-54926 - CVSS 7.2 (high), 2025-08-20: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an…
- CVE-2025-54925 - CVSS 7.5 (high), 2025-08-20: CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the…
- CVE-2025-54924 - CVSS 7.5 (high), 2025-08-20: CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially…
- CVE-2025-54927 - CVSS 4.9 (medium), 2025-08-20: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive…
- CVE-2024-9005 - CVSS 7.3 (high), 2024-10-08: CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is…
- CVE-2023-5987 - CVSS 6.1 (medium), 2023-11-15: A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross…
- CVE-2023-5986 - CVSS 8.2 (high), 2023-11-15: A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By…
