CVE-2025-6788 — Schneider Electric / EcoStruxure™ Power Monitoring Expert

Description (CNA)

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML diagrams.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure™ Power Monitoring Expert	affected 2023 before All; affected 2023 R2 before All; affected 2024 before All; affected 2024 R2 before All
Schneider Electric / EcoStruxure™ Power Operation Advanced Reporting and Dashboards Module	affected 2022 w/ Advanced Reporting Module before All; affected 2024 w/ Advanced Reporting Module before All

CWE

CWE-668

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-189-04.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.