Skip to content
OpenAdvisories
High ICSA-25-014-02 1 CVE

Schneider Electric Vijeo Designer and EcoStruxureâ„¢ Machine Expert (Update A)

Published Sep 10, 2024 · Updated Jul 8, 2025 · Revision 2

Vendor: Schneider Electric Product: EcoStruxure Machine Expert Product: Vijeo Designer

Summary

Schneider Electric is aware of a vulnerability in its Vijeo Designer product.

The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Designer software offers functions such as multimedia capabilities and remote access for more efficiency.

Failure to apply the remediations provided below may risk privilege escalation, which could result in unauthorized access to workstation resources.

July 2025 Update: A remediation is now available for EcoStruxure™ Machine Expert (with Vijeo Designer optional component installed).

Vulnerabilities 1

Revision history

  1. #2.0.0

    A remediation is now available for EcoStruxure™ Machine Expert (with Vijeo Designer optional component installed).

  2. #1.0.0

    Original Release

References