Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2025-54927

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an authenti

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an authenticated attackers uses a crafted path input that is processed by the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)

Default version status: unaffected

  • Version 2022affected
  • Version 2023affected
  • Version 2024affected
  • Version 2024 R2affected

Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module

Default version status: unaffected

  • Version 2022 w/ Advanced Reporting Moduleaffected
  • Version 2024 w/ Advanced Reporting Moduleaffected

References