Skip to content
OpenAdvisories
High ICSA-25-037-01 1 CVE

Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update B)

Published Oct 8, 2024 · Updated May 13, 2025 · Revision 3

Vendor: Schneider Electric Product: EcoStruxure™ Power Monitoring Expert (PME)

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert
(PME) product.

EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitoring-expert/#overview is an on-premises software product used to help
power critical and energy-intensive facilities maximize uptime and operational efficiency.

Failure to apply the remediation provided below may risk deserialization of untrusted data,
which could result in Remote Code Execution.

March 2025 Update: The CVSS4.0 scoring has been added to the vulnerability details and more
specific remediation information provided.

Vulnerabilities 1

Revision history

  1. #1.1.1

    Removed unreferenced product and its version from the product tree.

  2. #1.1.0

    The CVSS4.0 scoring has been added to the vulnerability details and more specific remediation information provided.

  3. #1.0.0

    Original Release

References