Skip to content
OpenAdvisories
High ICSA-25-079-01 1 CVE

Schneider Electric EcoStruxure (Update A)

Published Feb 11, 2025 · Updated Jun 2, 2026 · Revision 3

Vendor: Schneider Electric Product: EcoStruxure™ Process Expert Product: EcoStruxure™ Process Expert 2023 Product: EcoStruxure™ Process Expert for AVEVA System Platform

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform products. The EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform products are engineering tools that facilitates and automates the design, maintenance, commissioning, and operation of Control projects for Modicon controllers and the associated Supervision projects for SCADA software regrouped in a system.. Failure to apply the Fix/Mitigations provided below may risk a local privilege escalation, which could result in loss of confidentiality, integrity and availability of the engineering workstation.

Vulnerabilities 1

Revision history

  1. #3

    Update A - CISA Republication update based on Schneider Electric CPCERT SEVD-2025-042-03 advisory

  2. #2

    A remediation is available for EcoStruxure Process Expert for AVEVA System Platform

  3. #1

    Original Release

References