Product by Schneider Electric
Ecostruxure™ Power Operation (epo)
9 known vulnerabilities in Ecostruxure™ Power Operation (epo) (Schneider Electric), 1 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| High | CVE-2022-45198 | Pillow: security vulnerability | 7.5 | |
| High | CVE-2025-54923 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME): Deserialization of Untrusted Data | — | |
| High | CVE-2025-54926 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME): Path Traversal | 7.2 | |
| High | CVE-2026-4827 | Insufficient Entropy vulnerability on Multiple Products | — | |
| High | CVE-2025-54925 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME): Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2025-54924 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME): Server-Side Request Forgery (SSRF) | 7.5 | |
| Medium | CVE-2025-54927 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME): Path Traversal | 4.9 | |
| High | CVE-2023-28003 | Schneider Electric EcoStruxure Power Monitoring Expert: Insufficient Session Expiration | 6.7 |