CVE-2025-50123: Schneider Electric Ecostruxure It Data Center Expert

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account when the server is accessed via a console and through exploitation of the hostname input.

Affected products

Published 2025-07-11. Last modified 2026-06-17.