Path Traversal Vulnerability in Schneider Electric Products

CVE-2025-5740

What is CVE-2025-5740?

A path traversal vulnerability exists in multiple Schneider Electric products that allows unauthenticated users to manipulate file paths, potentially leading to arbitrary file writes. This flaw can enable attackers to access sensitive system files or directories, compromising the integrity and confidentiality of the system. The vulnerability arises from inadequate restrictions on user-supplied paths, making it crucial for users to implement necessary security measures to mitigate the risk. Users are advised to update their products to the latest versions provided by Schneider Electric to safeguard against this exploit.

References