What is CVE-2025-2002?

CVE-2025-2002 is a medium-severity vulnerability in Schneider Electric Ecostruxure Panel Server, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.0/10. Published 2025-03-12.

How severe is CVE-2025-2002?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Information disclosure in Schneider Electric Ecostruxure Panel Server

CVE-2025-2002

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP server credentials when the FTP server is deployed, and the device is placed in debug mode by an administrative user and…

EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N.

Affected products

Schneider Electric Ecostruxure Panel Server — versions v2.0 and prior

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

cybersecurity@se.com

Frequently asked questions

What is CVE-2025-2002?: CVE-2025-2002 is a medium-severity vulnerability in Schneider Electric Ecostruxure Panel Server, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.0/10. Published 2025-03-12.
How severe is CVE-2025-2002?: Medium severity. CVSS v3 base score is 6.0 out of 10.