EcoStruxure Panel Server Security Notification SEVD-2025-070-01

This document details a medium-severity vulnerability (CVE-2025-2002) in EcoStruxure Panel Server versions v2.0 and prior, involving the insertion of sensitive information into log files that could expose FTP server credentials when debug mode is enabled. Schneider Electric recommends upgrading to firmware version v2.1 or later and using EcoStruxure Power Commission Software v2.33.0 or later, or alternatively ensuring debug mode is disabled as a mitigation.