CVE-2025-6788
Medium
Description
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML diagrams.
SeverityMedium
CVSS5.3
Exploit probability—
ProductEcoStruxure™ Power Monitoring Expert
PublishedJul 11, 2025
First seenJul 11, 2025
Weakness typeCWE-668CWE-668
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Schneider Electric EcoStruxure™ Power Monitoring Expert | 2023, 2023 R2, 2024, 2024 R2 | — |
| Schneider Electric EcoStruxure™ Power Operation Advanced Reporting and Dashboards Module | 2022 w/ Advanced Reporting Module, 2024 w/ Advanced Reporting Module | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.