CVE-2025-54923_CVE-2025-54923

{
    "lastseen": "",
    "description": "CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization.",
    "published": "2025-08-20T13:30:04.988Z",
    "modified": "2025-08-20T13:44:42.905Z",
    "type": "cve",
    "title": "CVE-2025-54923",
    "source": "schneider",
    "references": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-02.pdf",
    "id": "CVE-2025-54923",
    "bulletinFamily": "",
    "cwe": [
        "CWE-502"
    ],
    "cvelist": null,
    "sourceData": "Schneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2022\nSchneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2023\nSchneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2024\nSchneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2024 R2\nSchneider Electric EcoStruxure\u2122 Power Operation (EPO) Advanced Reporting and Dashboards Module Version 2022 w/ Advanced Reporting Module\nSchneider Electric EcoStruxure\u2122 Power Operation (EPO) Advanced Reporting and Dashboards Module Version 2024 w/ Advanced Reporting Module",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "EcoStruxure\u2122 Power Monitoring Expert (PME)",
    "version": "Version 2022",
    "vendor": "Schneider Electric",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}