https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:06:37 +0000 https://cve.radiocsirt.org/vuln/cve-2025-54924 <p><strong>Affected:</strong> Schneider Electric EcoStruxure™ Power Monitoring Expert (PME), Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module</p> <p>CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulnerable endpoint.</p> <p><strong>Affected:</strong> Schneider Electric EcoStruxure™ Power Monitoring Expert (PME), Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module</p> <p>CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulnerable endpoint.</p> https://cve.radiocsirt.org/vuln/cve-2025-54924 https://cve.radiocsirt.org/vuln/icsa-25-224-03 <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. Note: There are some instances of PME being deployed in a Managed Service model. EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems. Failure to apply the remediation and/or mitigations provided below may risk deserialization of untrusted data, server-side request forgery and/or path traversal that could result in remote code execution, and/or unauthorized access to sensitive data.</p> <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. Note: There are some instances of PME being deployed in a Managed Service model. EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems. Failure to apply the remediation and/or mitigations provided below may risk deserialization of untrusted data, server-side request forgery and/or path traversal that could result in remote code execution, and/or unauthorized access to sensitive data.</p> https://cve.radiocsirt.org/vuln/icsa-25-224-03