Schneider Electric EcoStruxure IT Data Center Expert

This report details a vulnerability discovered in Schneider Electric’s EcoStruxure IT Data Center Expert software, specifically versions up to 9.1.1. The vulnerability, classified as CWE-611, is an Improper Restriction of XML External Entity Reference that could allow an attacker with a user account to disclose server-…