Skip to content
OpenAdvisories
Medium ICSA-25-070-01 1 CVE

Schneider Electric Uni-Telway Driver (Update D)

Published Feb 11, 2025 · Updated Jun 11, 2026 · Revision 8

Vendor: Schneider Electric Product: EcoStruxure Control Expert Product: EcoStruxure™ Process Expert Product: EcoStruxure™ Process Expert for AVEVA System Platform Product: OPC Factory Server Product: Uni-Telway driver

Summary

Schneider Electric is aware of a vulnerability in its [Uni-Telway driver](https://www.se.com/us/en/product-range/573-unitelway/#overview) which is part of [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/#overview), [EcoStruxure™ Process Expert](https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert), [EcoStruxure™ Process Expert for AVEVA System Platform](https://www.se.com/ww/en/product-range/55570689-ecostruxure-process-expert-for-aveva-system-platform/#overview) and [OPC Factory Server](https://www.se.com/ww/en/product-range/547-opc-factory-server/) products.

Failure to apply the mitigations provided below may risk denial of service of engineering workstation, which could result in interruption of engineering operation.

Vulnerabilities 1

Revision history

  1. #8

    CISA Republication update based on Schneider Electric CPCERT SEVD-2025-042-02 advisory

  2. #7

    Mitigation is now available for EcoStruxure™ Process Expert for AVEVA System Platform.

  3. #6

    CISA Republication update based on Schneider Electric CPCERT SEVD-2025-042-02 advisory

  4. #5

    Removed comment “EcoStruxure™ Process Expert found to be not affected by this vulnerability.

  5. #4

    CISA Republication - Initial Republication of Schneider Electric CPCERT SEVD-2025-042-02 advisory

  6. #3

    Mitigations are now available for EcoStruxure™ Process Expert. EcoStruxure™ Process Expert found to be not affected by this vulnerability and advisory title has been modified

  7. #2

    Mitigations section updated for EcoStruxure™ Control Expert and OPC Factory Server.

  8. #1

    Original Release

References