EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) vulnerabilities

3 known vulnerabilities in EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) from Schneider Electric. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  EcoStruxure™ IT Data Center Expert (Formerly…: Improper Neutralization of Argument Delimiters in a Command

  CVE-2026-8044Sep 9, 2026Schneider Electric

  CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parame

• 8.6 High severity

  EcoStruxure™ IT Data Center Expert (Formerly…: Server-Side Request Forgery

  CVE-2026-19233Sep 9, 2026Schneider Electric

  CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.

• 7.5 High severity

  EcoStruxure™ IT Data Center Expert (Formerly…: Use of Hard-coded Credentials

  CVE-2025-13957Mar 10, 2026Schneider Electric

  CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by d