Skip to content
OpenAdvisories
Medium ICSA-25-203-03 1 CVE

Schneider Electric EcoStruxure

Published Jul 8, 2025 · Updated Jul 8, 2025

Vendor: Schneider Electric Product: EcoStruxure™ Power Monitoring Expert (PME) Product: EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and
EcoStruxure™ Power Operation (EPO) products.
EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitoring-expert/#overview is an on-premises software used to help power critical and
energy-intensive facilities maximize uptime and operational efficiency. Note: There are some instances of PME
being deployed in a Managed Service model.
EcoStruxure™ Power Operation (EPO) and EcoStruxure™ Power SCADA Operation (PSO) https://www.se.com/us/en/product-range/65405-ecostruxure-power-operation/?parent-subcategory-id=59326966&filter=business-4-low-voltage-products-and-systems#overview are on-premises
software offers that provides a single platform to monitor and control medium and lower power systems.
Failure to apply the remediation provided below may risk unintended data exposure to other authenticated
users on that system.

Vulnerabilities 1

Revision history

  1. #1.0.0

    Original Release

References