← Search results
CVE-LINKED INVENTORY6 SECURITY RECORDS
Schneider Electric
EcoStruxure™ Power Monitoring Expert (PME)
Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.
This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.
A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.
CVE-observed version history
| CVE | Published | Affected versions | Fixed version information | Publisher evidence |
|---|---|---|---|---|
| CVE-2025-11739 | 10 Mar 2026 | Version 2022; Version 2023; Version 2023 R2; Version 2024; Version 2024 R2 | Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) that includes a fix for this vulnerability. Contact Schneider Electric’s Customer Care Center to download this hotfix. No reboot required. | Update reference ↗ |
| CVE-2025-54927 | 20 Aug 2025 | Version 2022; Version 2023; Version 2024; Version 2024 R2; Version 2022 w/ Advanced Reporting Module; Version 2024 w/ Advanced Reporting Module | Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance applying this hotfix. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below. | Update reference ↗ |
| CVE-2025-54926 | 20 Aug 2025 | Version 2022; Version 2023; Version 2024; Version 2024 R2; Version 2022 w/ Advanced Reporting Module; Version 2024 w/ Advanced Reporting Module | Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance applying this hotfix. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below. | Update reference ↗ |
| CVE-2025-54925 | 20 Aug 2025 | Version 2022; Version 2023; Version 2024; Version 2024 R2; Version 2022 w/ Advanced Reporting Module; Version 2024 w/ Advanced Reporting Module | Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance applying this hotfix. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below. | Update reference ↗ |
| CVE-2025-54924 | 20 Aug 2025 | Version 2022; Version 2023; Version 2024; Version 2024 R2; Version 2022 w/ Advanced Reporting Module; Version 2024 w/ Advanced Reporting Module | Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance applying this hotfix. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below. | Update reference ↗ |
| CVE-2025-54923 | 20 Aug 2025 | Version 2022; Version 2023; Version 2024; Version 2024 R2; Version 2022 w/ Advanced Reporting Module; Version 2024 w/ Advanced Reporting Module | Hotfix_279338_Release_2024R2 is available for EcoStruxure™ Power Monitoring Expert (PME) 2024 R2 that includes a fix for the vulnerabilities CVE-2025-54924, CVE-2025-54925, CVE-2025-54926, CVE-2025-54927 and CVE-2025-54923. Contact Schneider Electric’s Customer Care Center for assistance applying this hotfix. In addition to applying the hotfixes noted above, you are encouraged to review the mitigations listed below. | Update reference ↗ |
How this record is maintained
The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.