Privilege escalation in Schneider Electric Ecostruxure™ It Data Center Expert
CVE-2025-50124
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a setup script.
Vulnerability class: Privilege Escalation
EPSS: 0.002 (8.0th percentile) — read the EPSS interpretation.
Affected products
- Schneider Electric Ecostruxure™ It Data Center Expert — versions 8.3