Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-6438 EUVD-2025-21129GHSA-39gj-7c5p-ccx8

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls and X…

Published Jul 11, 2025 · Updated Nov 3, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure™ IT Data Center Expert Category: ICS / OT

Description

A

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could
cause manipulation of SOAP API calls and XML external entities injection resulting in unauthorized file access
when the server is accessed via the network using an application account.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ IT Data Center Expert 8.3 – ≤ Prior to —

Advisories 3

References