Skip to content
OpenAdvisories
High ICSA-25-322-01 1 CVE

Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio

Published Nov 11, 2025 · Updated Nov 11, 2025

Vendor: Schneider Electric Product: BLUE Open Studio Product: EcoStruxure Machine SCADA Expert

Summary

Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in
EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products.
The EcoStruxure Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedicated to Line Management & Lite Supervision applications to run in Harmony Industrial PC and GTU Open Box.
Pro-face BLUE Open Studio is a development and runtime software that incorporates tools users need to create SCADA HMI applications, dashboards, and OEE interfaces.
Failure to apply the remediation provided below may risk brute-force password recovery attacks, which could result in unauthorized access to user accounts and lead to loss of Confidentiality, and Integrity.

Vulnerabilities 1

  • High 8.4
    CVE-2025-9317

    AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm

    The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.

    AVEVA Edge Browsers

Revision history

  1. #1.0.0

    Original Release

References