Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure™ IT Data Center Expert.
The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipment.
Failure to apply the remediation provided below may risk information disclosure.
Vulnerabilities 1
-
High 7.1
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclos…
Revision history
-
#1.0.0
Original Release
References
-
Data Center Expert - SEVD-2026-160-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/