Vulnerability in Schneider Electric Ecostruxure™ It Data Center Expert (Formerly Known As Struxureware Expert)
CVE-2025-13957
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS P…
EPSS: 0.005 (66.6th percentile) — read the EPSS interpretation.
Affected products
- Schneider Electric Ecostruxure™ It Data Center Expert (Formerly Known As Struxureware Expert) — versions v9.0 and prior