Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-54926

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker wi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker with admin privileges uploads a malicious file over HTTP which then gets executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)

Default version status: unaffected

  • Version 2022affected
  • Version 2023affected
  • Version 2024affected
  • Version 2024 R2affected

Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module

Default version status: unaffected

  • Version 2022 w/ Advanced Reporting Moduleaffected
  • Version 2024 w/ Advanced Reporting Moduleaffected

References