Medium SEVD-2025-070-01 1 CVE

EcoStruxure™ Panel Server

Published Mar 11, 2025 · Updated Mar 11, 2025

Vendor: Schneider Electric Product: EcoStruxure Power Commission Product: EcoStruxure™ Panel Server

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Panel Server product, all models.

The EcoStruxure™ Panel Server https://www.se.com/us/en/product-range/40739468-ecostruxure-panel-server/#products is a modular gateway with enhanced cybersecurity that provides easy and
fast connections to multiple concurrent edge control or cloud applications.

Failure to apply the remediations provided below may risk disclosure of sensitive information, including the
disclosure of credentials.

Vulnerabilities 1

Medium 6.0

CVE-2025-2002

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP …

Schneider Electric EcoStruxure™ Panel Server ICS / OT

Mar 12, 2025

Revision history

2025-03-11 #1.0.0
Original Release

References

EcoStruxure™ Panel Server - SEVD-2025-070-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-070-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-070-01.pdf
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390