Schneider Electric Ecostruxure Power Operation vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Schneider Electric Ecostruxure Power Operation: 2 record(s), with affected versions and fixes.
cpe:2.3:a:schneider-electric:ecostruxure_power_operation

CVE-2026-4827 High · 8.7 CWE-331 May 12, 2026

Insufficient Entropy vulnerability on Multiple Products

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

CVE-2025-11739 High · 7.8 CWE-502 Mar 10, 2026

Deserialization of Untrusted Data in Schneider Electric Ecostruxure Power Monitoring Expert

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.