EcoStruxure IT Data Center Expert Security Notification

This document details multiple critical and high-severity vulnerabilities in EcoStruxure™ IT Data Center Expert versions 8.3 and prior, including OS command injection, insufficient entropy, code injection, SSRF, privilege escalation, and XML external entity injection. Schneider Electric recommends upgrading to version 9.0 to remediate these flaws, which could lead to unauthenticated remote code execution, information disclosure, and system compromise.