Skip to content
OpenAdvisories
High ICSA-26-022-01 1 CVE

Schneider Electric EcoStruxure Process Expert (Update A)

Published Jan 13, 2026 · Updated May 21, 2026 · Revision 4

Vendor: Schneider Electric Product: EcoStruxure™ Process Expert Product: EcoStruxure™ Process Expert for AVEVA System Platform

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert
for AVEVA System Platform products.
The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire
infrastructure for a sustainable, productive and market-agile plant.
The EcoStruxure™ Process Expert for AVEVA System Platform product enables users to achieve operational
profitability from design engineering to meeting the demands of modern-day production. It provides an asset
centric and object-oriented automation platform to deploy system-wide standards in a digital ecosystem.
Failure to apply the Fix/Mitigations provided below may risk modification of the executable binaries, which
could result in privilege escalation.

Vulnerabilities 1

Revision history

  1. #4

    CISA Republication update based on Schneider Electric CPCERT SEVD-2026-013-02 advisory

  2. #3

    A remediation is available for EcoStruxure™ Process Expert for AVEVA System Platform

  3. #2

    CISA Republication - Initial Republication of Schneider Electric CPCERT SEVD-2026-013-02 advisory

  4. #1

    Original Release

References