Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-11739 | Version 2022 ; Version 2024 | CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges whe | HIGH 8.5 | 0.2 % | ||
| CVE-2025-54927 | Version 2022 w/ Advanced Reporting Module ; Version 2024 w/ Advanced Reporting Module | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized ac | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-54926 | Version 2022 w/ Advanced Reporting Module ; Version 2024 w/ Advanced Reporting Module | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code exe | HIGH 7.2 | 0.9 % | ||
| CVE-2025-54925 | Version 2022 w/ Advanced Reporting Module ; Version 2024 w/ Advanced Reporting Module | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker con | HIGH 7.5 | 0.5 % | ||
| CVE-2025-54924 | Version 2022 w/ Advanced Reporting Module ; Version 2024 w/ Advanced Reporting Module | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sen | HIGH 7.5 | 0.5 % | ||
| CVE-2025-54923 | Version 2022 w/ Advanced Reporting Module ; Version 2024 w/ Advanced Reporting Module | CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity wh | HIGH 8.7 | 0.7 % |