ZDI-26-212
HIGH 8.8
Published
Mar 16, 2026
Schneider Electric EcoStruxure Data Center Expert Hard-coded Password Remote Code Execution Vulnerability
Schneider
Schneider Electric EcoStruxure Data Center Expert contains a critical vulnerability (CVE-2025-13957) that allows authenticated remote attackers to execute arbitrary code on affected systems with a CVSS score of 8.8. While authentication is required, successful exploitation could give attackers complete control over data center infrastructure management systems. Security teams should prioritize patching this vulnerability immediately and review access controls to limit who can authenticate to these systems.