ZDI-26-212 HIGH 8.8 Published Mar 16, 2026

Schneider Electric EcoStruxure Data Center Expert Hard-coded Password Remote Code Execution Vulnerability

Schneider

Schneider Electric EcoStruxure Data Center Expert contains a critical vulnerability (CVE-2025-13957) that allows authenticated remote attackers to execute arbitrary code on affected systems with a CVSS score of 8.8. While authentication is required, successful exploitation could give attackers complete control over data center infrastructure management systems. Security teams should prioritize patching this vulnerability immediately and review access controls to limit who can authenticate to these systems.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy