This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-13957 | BDVDB-2026-319396 Detail

Schneider ElectricEcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)

Description#

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-798 Use of Hard-coded Credentials

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.