CVE-2025-50125 — Schneider Electric / EcoStruxure™ IT Data Center Expert

CVE-2025-50125

Schneider Electric / EcoStruxure™ IT Data Center Expert PUBLISHED

Description (CNA)

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation of host request header.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure™ IT Data Center Expert	affected 8.3 through Prior to

CWE

CWE-918

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-189-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Jul/10