Vulnerabilidades do Schneider Electric Ecostruxure Power Operation

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Schneider Electric Ecostruxure Power Operation: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:schneider-electric:ecostruxure_power_operation

CVE-2026-4827 Alta · 8.7 CWE-331 12/05/2026

Insufficient Entropy vulnerability on Multiple Products

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

CVE-2025-11739 Alta · 7.8 CWE-502 10/03/2026

Deserialization of Untrusted Data em Schneider Electric Ecostruxure Power Monitoring Expert

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.