CVE-2025-13957 | BDVDB-2026-319396 Detail
Schneider ElectricEcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
Description#
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-798 Use of Hard-coded Credentials
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.