Skip to content
OpenAdvisories
High · 8.9 CVE-2025-50122 EUVD-2025-21127GHSA-4qqx-6m6r-7q77

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is rev…

Published Jul 11, 2025 · Updated Nov 3, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure™ IT Data Center Expert Category: ICS / OT

Description

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the
password generation algorithm is reverse engineered with access to installation or upgrade artifacts.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ IT Data Center Expert 8.3 – ≤ Prior to —

Advisories 3

References