EP
Product
EcoStruxure™ Power Monitoring Expert (PME)
9
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add EcoStruxure™ Power Monitoring Expert (PME) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54923 | 8.7 | Aug 20 | CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted… Affected: Version 2022; Version 2023; Version 2024; Version 2024 R2 |
| CVE-2025-11739 | 7.8 | Mar 10 | CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker… Affected: Version 2022; Version 2023; Version 2023 R2; Version 2024; Version 2024 R2 |
| CVE-2025-54925 | 7.5 | Aug 20 | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a… Affected: Version 2022; Version 2023; Version 2024; Version 2024 R2 |
| CVE-2025-54924 | 7.5 | Aug 20 | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a… Affected: Version 2022; Version 2023; Version 2024; Version 2024 R2 |
| CVE-2024-9005 | 7.3 | Oct 8 | CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web… Affected: Version 2022 and prior |
| CVE-2025-54926 | 7.2 | Aug 20 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution when an authenticated attacker… Affected: Version 2022; Version 2023; Version 2024; Version 2024 R2 |
| CVE-2023-5987 | 6.1 | Nov 15 | A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting… Affected: Version 2020 CU2 and prior; Version 2021 CU1 and prior |
| CVE-2023-5986 | 6.1 | Nov 15 | A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack Affected: Version 2020 CU2 and prior; Version 2021 CU1 and prior |
| CVE-2025-54927 | 4.9 | Aug 20 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized access to sensitive files when an… Affected: Version 2022; Version 2023; Version 2024; Version 2024 R2 |
Showing 9