CVE-2025-13957 — Schneider Electric / EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)

CVE-2025-13957

Schneider Electric / EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) PUBLISHED

Description (CNA)

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)	affected v9.0 and prior

CWE

CWE-798

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-069-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-069-05.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.