Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-54925

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a mali

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a malicious url.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)

Default version status: unaffected

  • Version 2022affected
  • Version 2023affected
  • Version 2024affected
  • Version 2024 R2affected

Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module

Default version status: unaffected

  • Version 2022 w/ Advanced Reporting Moduleaffected
  • Version 2024 w/ Advanced Reporting Moduleaffected

References