Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-6788

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML diagrams.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure™ Power Monitoring Expert

Default version status: unaffected

  • 2023 to < Allaffected
  • 2023 R2 to < Allaffected
  • 2024 to < Allaffected
  • 2024 R2 to < Allaffected

Schneider Electric EcoStruxure™ Power Operation Advanced Reporting and Dashboards Module

Default version status: unaffected

  • 2022 w/ Advanced Reporting Module to < Allaffected
  • 2024 w/ Advanced Reporting Module to < Allaffected

References