CVE-2020-7547: Schneider Electric Ecostruxure Energy Expert

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.

Affected products

• Schneider Electric Ecostruxure Energy Expert: version 2.0 only
• Schneider Electric Ecostruxure Power Monitoring Expert: version 7.0 only; version 8.0 only; version 9.0 only
• Schneider Electric Power Manager: version 1.1 only; version 1.2 only; version 1.3 only
• Schneider Electric Powerscada Expert With Advanced Reporting And Dashboards: version 8.0 only
• Schneider Electric Powerscada Operation With Advanced Reporting And Dashboards: version 9.0 only

Published 2020-12-01. Last modified 2026-06-17.