CVE-2025-50125: medium-severity vulnerability in Schneider Electric EcoStruxure™ IT Data Center…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.5%
A
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote
code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation
of host request header.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N
Affected products
Schneider Electric · EcoStruxure™ IT Data Center ExpertRelated CVEs — Schneider Electric EcoStruxure™ IT Data Center…
In the same product, most dangerous first.