QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-54923

Back to search

CVE-2025-54923

Published: Aug 20, 2025

Modified: Aug 20, 2025

PUBLISHED

Description

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization.

VendorProductVersions

Schneider Electric

EcoStruxure™ Power Monitoring Expert (PME)

affected
Version 2022
affected
Version 2023
affected
Version 2024
affected
Version 2024 R2

Schneider Electric

EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module

affected
Version 2022 w/ Advanced Reporting Module
affected
Version 2024 w/ Advanced Reporting Module

Weaknesses (CWE)

CWE-502

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now