CVE Database
/

CVE-2025-50125

Back to search

CVE-2025-50125

Published: Jul 11, 2025

Modified: Nov 3, 2025

PUBLISHED

Description

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation of host request header.

VendorProductVersions

Schneider Electric

EcoStruxure™ IT Data Center Expert

affected
8.3 - <= Prior to

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now