EcoStruxure™ Power Operation vulnerabilities

2 known vulnerabilities in EcoStruxure™ Power Operation from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Easergy MiCOM C264: Insufficient Entropy

  CVE-2026-4827May 12, 2026Schneider Electric

  CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

• 7.8 High severity

  EcoStruxure™ Power Monitoring Expert (PME): Deserialization of Untrusted Data

  CVE-2025-11739Mar 10, 2026Schneider Electric

  CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.