Product by Schneider Electric

    Ecostruxure Power Monitoring Expert

    15 known vulnerabilities in Ecostruxure Power Monitoring Expert (Schneider Electric), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Ecostruxure Power Monitoring Expert (Schneider Electric)
    SeverityCVETitleCVSSPublished
    HighCVE-2020-7545

    Schneider Electric EcoStruxure Power Monitoring Expert: Improper Access Control

    		7.2
    HighCVE-2020-7547

    Schneider Electric EcoStruxure Power Monitoring Expert: Improper Access Control

    		8.8
    HighCVE-2022-22727

    Schneider Electric EcoStruxure Power Monitoring Expert: Improper Input Validation

    		8.8
    HighCVE-2021-22826

    Schneider Electric EcoStruxure Power Monitoring Expert: Improper Input Validation

    		8.8
    CriticalCVE-2023-5391

    Schneider Electric EcoStruxure Power Monitoring Expert: Deserialization of Untrusted Data

    		9.8
    HighCVE-2021-22827

    Schneider Electric EcoStruxure Power Monitoring Expert: Improper Input Validation

    		8.8
    HighCVE-2025-11739

    Schneider Electric EcoStruxure™ Power Monitoring Expert (PME): Deserialization of Untrusted Data

    		7.8
    MediumCVE-2022-22726

    Schneider Electric EcoStruxure Power Monitoring Expert: Improper Input Validation

    		6.5
    HighCVE-2023-5986

    Schneider Electric EcoStruxure Power Monitoring Expert (PME): Open Redirect

    		8.2
    MediumCVE-2018-7797

    Schneider Electric EcoStruxure Energy Expert: security vulnerability

    		6.1
    MediumCVE-2020-7546

    Schneider Electric EcoStruxure Power Monitoring Expert: Cross-site Scripting

    		5.4
    MediumCVE-2023-5987

    Schneider Electric EcoStruxure Power Monitoring Expert (PME): Cross-site Scripting

    		6.1
    MediumCVE-2025-6788

    Schneider Electric EcoStruxure™ Power Monitoring Expert: Exposure of Resource to Wrong Sphere

    		—
    HighCVE-2023-28003

    Schneider Electric EcoStruxure Power Monitoring Expert: Insufficient Session Expiration

    		6.7
    MediumCVE-2022-22804

    Schneider Electric EcoStruxure Power Monitoring Expert: Cross-site Scripting

    		5.4

    All products by Schneider Electric