EcoStruxure Power Monitoring Expert and Power Operation Security Notification (CVE-2023-5391)

This document discloses a critical remote code execution vulnerability (CVE-2023-5391) in Schneider Electric's EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) with Advanced Reports, caused by deserialization of untrusted data. It provides affected product versions, remediation via Hotfix-145271, and recommends mitigations such as IP allowlisting and network isolation to prevent exploitation.