Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-50125 EUVD-2025-21133GHSA-ch3m-6mv4-c3wh

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server i…

Published Jul 11, 2025 · Updated Nov 3, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure™ IT Data Center Expert Category: ICS / OT

Description

A

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote
code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation
of host request header.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ IT Data Center Expert 8.3 – ≤ Prior to —

Advisories 3

References