Schneider Electric Ecostruxure Power Monitoring Expert vulnerabilities

2 CVEs affecting Schneider Electric Ecostruxure Power Monitoring Expert, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6788, published 2025-07-11.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-9005, published 2024-10-08. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.
• CVE-2025-6788, published 2025-07-11. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially…