CNNVD-202507-1642 Information

CNNVD ID

CNNVD-202507-1642

CVE-2025-50124

  • CNNVD Published: 2025-07-11

Description (Chinese)

Schneider Electric EcoStruxure IT Data Center Expert是法国施耐德电气(Schneider Electric)公司的一款可扩展的监控软件,用于收集、组织和分发关键设备信息,提供设备的全面视图。 Schneider Electric EcoStruxure IT Data Center Expert存在安全漏洞,该漏洞源于权限管理不当,可能导致权限提升。

Description (English)

Schneider Electric EcoStruxure IT Data Center Expert is an extended surveillance software for Schneider Electric, France, which collects, organizes and distributes information on key equipment and provides a full view of the equipment. There is a security loophole in Schneider Electric EcoStruxure IT Data Center Express, which stems from the mismanagement of authority, which may lead to an increase in authority.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

SCHUHFRIED

Published

2025-07-11

Last Modified

2026-02-24

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-189-01.pdf

Patch

https://www.apc.com/us/en/product-range/61851-ecostruxure-it-data-center-expert/#products

Share on: