Path Traversal Vulnerability in Schneider Electric's Software

CVE-2025-54927

What is CVE-2025-54927?

A path traversal vulnerability exists that may allow authenticated attackers to exploit improperly validated input to gain unauthorized access to sensitive files within the system. By crafting malicious path inputs, attackers can manipulate the filesystem structure, potentially leading to exposure of critical information and compromising system integrity. It is crucial for users and administrators of affected Schneider Electric software to apply necessary security patches and follow best practices to mitigate this vulnerability.

References