Schneider-Electric Ecostruxure™ Power Operation (Epo) Advanced Reporting And Dashboards Module
6 CVEs affecting Schneider-Electric Ecostruxure™ Power Operation (Epo) Advanced Reporting And Dashboards Module. Latest disclosed: 2026-03-10. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-11739 | High | 7.8 | 2026-03-10 | CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authent… |
CVE-2025-54925 | High | 7.5 | 2025-08-20 | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the applica… |
CVE-2025-54924 | High | 7.5 | 2025-08-20 | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially craf… |
CVE-2025-54926 | High | 7.2 | 2025-08-20 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an auth… |
CVE-2025-54927 | Medium | 4.9 | 2025-08-20 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive f… |
CVE-2025-54923 | | 2025-08-20 | CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated us… |