Schneider ELectric EcoStruxure Power Monitoring Expert

• CVE-2025-6788 Medium 5.3 A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate 0.3%
• CVE-2023-5391 Critical 9.8 A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the appli 0.9%
• CVE-2023-28003 Medium 6.7 A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out 0.3%