Description
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources
to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML
diagrams.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ Power Monitoring Expert | 2023 – < All, 2023 R2 – < All, 2024 – < All, 2024 R2 – < All | All |
| Schneider Electric | EcoStruxure™ Power Operation Advanced Reporting and Dashboards Module | 2022 w/ Advanced Reporting Module – < All, 2024 w/ Advanced Reporting Module – < All | All |
Advisories 2
- ICSA-25-203-03 Schneider Electric EcoStruxure CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-189-04 EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) with Advanced Reporting and Dashboards Schneider Electric CPCERT · Jul 8, 2025