What’s Vulnerable › Vulnerabilities

CVE-2025-6788

• Severity: medium (CVSS 5.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-11 · updated 2026-06-17
• Weakness: CWE-668

Description

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML diagrams.

Affected products

• EcoStruxure Power Monitoring Expert (Versions 2020 and prior): from 2023; from 2023 R2; from 2024; from 2024 R2
• Schneider Electric EcoStruxure™ Power Operation Advanced Reporting and Dashboards Module: from 2022 w/ Advanced Reporting Module; from 2024 w/ Advanced Reporting Module

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-189-04.pdf

Get alerted when CVE-2025-6788 or the next vulnerability affects your stack