cbcvebase.

Schneider Electric Webhmi Deployed With Ecostruxure Power Automation System vulnerabilities

1 known vulnerability affecting schneider_electric/webhmi_deployed_with_ecostruxure_power_automation_system.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-1960P2CRITICALCVSS 9.8vWebHMI v4.1.0.0 and prior when deployed with EPAS User Interface 2.6.30.19 and prior2025-03-12
CVE-2025-1960 [CRITICAL] CWE-1188 CVE-2025-1960: CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could caus CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized commands when a system’s default password credentials have not been changed on first use. The default username is not displayed correctly in the WebHMI interface.
nvd
Schneider Electric Webhmi Deployed With Ecostruxure Power Automation System vulnerabilities | cvebase