{“lastseen”:””,”description”:”CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could cause remote code execution when an authenticated attacker with admin privileges uploads a malicious file over HTTP which then gets executed.”,”published”:”2025-08-20T13:48:02.393Z”,”modified”:”2025-08-20T13:48:02.393Z”,”type”:”cve”,”title”:”CVE-2025-54926″,”source”:”schneider”,”references”:”https:\/\/download.schneider-electric.com\/files?p_Doc_Ref=SEVD-2025-224-02\\u0026p_enDocType=Security+and+Safety+Notice\\u0026p_File_Name=SEVD-2025-224-02.pdf”,”id”:”CVE-2025-54926″,”bulletinFamily”:””,”cwe”:[“CWE-22″],”cvelist”:null,”sourceData”:”Schneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2022\\nSchneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2023\\nSchneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2024\\nSchneider Electric EcoStruxure\u2122 Power Monitoring Expert (PME) Version 2024 R2\\nSchneider Electric EcoStruxure\u2122 Power Operation (EPO) Advanced Reporting and Dashboards Module Version 2022 w\/ Advanced Reporting Module\\nSchneider Electric EcoStruxure\u2122 Power Operation (EPO) Advanced Reporting and Dashboards Module Version 2024 w\/ Advanced Reporting Module”,”sourceHref”:””,”cvss”:{“score”:7.2,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”EcoStruxure\u2122 Power Monitoring Expert (PME)”,”version”:”Version 2022″,”vendor”:”Schneider Electric”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could cause remote code execution when an authenticated attacker with…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,39,12,15,13,7,11,5],"class_list":["post-13702","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-72","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n