This vulnerability (CVE-2025-13957) arises from hard-coded credentials embedded in EcoStruxure IT Data Center Expert software. When the SOCKS Proxy feature is enabled, an attacker with knowledge of these credentials could potentially disclose sensitive information or execute code remotely. The vulnerability affects versions 9.0 and earlier. The SOCKS Proxy is disabled by default, which mitigates exposure unless explicitly enabled. The CVSS 4.0 score is 7.5, indicating high severity with network attack vector, low attack complexity, and partial privileges required.

If exploited, this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary code remotely on affected systems. The impact is significant given the potential for remote code execution, but exploitation requires enabling SOCKS Proxy and knowledge of privileged credentials. Since SOCKS Proxy is disabled by default, the risk is limited unless the feature is actively used.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to keep the SOCKS Proxy feature disabled unless absolutely necessary. Restrict access to administrator and database credentials to trusted personnel only. Monitor vendor communications for updates on patches or official mitigations.