Advisories · Technology

Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module.

Every CVE that names Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-11739 CVE record

CVSS 8.5 High

Deserialization of untrusted data in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others
- Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)
- Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
- Insecure deserialization
Not analysed yet 10 Mar 2026
CVE-2025-54927 CVE record

CVSS 4.9 Medium

Path traversal in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others
- Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)
- Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
- Path traversal
Not analysed yet 20 Aug 2025
CVE-2025-54926 CVE record

CVSS 7.2 High

Path traversal in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others
- Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)
- Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
- Path traversal
Not analysed yet 20 Aug 2025
CVE-2025-54925 CVE record

CVSS 7.5 High

Server-side request forgery in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others
- Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)
- Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
- Server-side request forgery (SSRF)
Not analysed yet 20 Aug 2025
CVE-2025-54924 CVE record

CVSS 7.5 High

Server-side request forgery in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others
- Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)
- Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
- Server-side request forgery (SSRF)
Not analysed yet 20 Aug 2025
CVE-2025-54923 CVE record

CVSS 8.7 High

Deserialization of untrusted data in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others
- Schneider Electric EcoStruxure™ Power Monitoring Expert (PME)
- Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
- Insecure deserialization
Not analysed yet 20 Aug 2025