CVE-2025-6438

published 2025-07-11

CVE-2025-6438: A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls and XML external entities…

Priority P4 33 medium 5.9 CVSS 4.0

AV N AC L AT P PR H UI N VC H VI N VA N SC L SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could
cause manipulation of SOAP API calls and XML external entities injection resulting in unauthorized file access
when the server is accessed via the network using an application account.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider_electric	ecostruxure_it_data_center_expert	8.3 – Prior to	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-611