CVE-2025-2002 — Schneider Electric / EcoStruxure Panel Server

CVE-2025-2002

Schneider Electric / EcoStruxure Panel Server PUBLISHED

Description (CNA)

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP server credentials when the FTP server is deployed, and the device is placed in debug mode by an administrative user and the debug files are exported from the device.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure Panel Server	affected v2.0 and prior

CWE

CWE-532

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-070-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-070-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.