Vulnerability in Schneider Electric Ecostruxure™ It Data Center Expert (Formerly Known As Struxureware Expert)
CVE-2025-13957
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.
EPSS: 0.007 (48.7th percentile) — read the EPSS interpretation.
Affected products
- Schneider Electric Ecostruxure™ It Data Center Expert (Formerly Known As Struxureware Expert) — versions v9.0 and prior