Windows Print Spooler embedded in EcoStruxure™ Process Expert

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert product. The EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market-agile plant. CVE-2021-34527 and CVE-2021-1675, also known as PrintNightmare, affects a native, built-in Windows service named “Print Spooler” that is enabled by default on Windows machines. The purpose of Print Spooler is to manage printers or printer servers. EcoStruxure™ Process Expert uses Microsoft embedded virtualization technology that cannot be patched using standard Microsoft update steps. An upcoming release of EcoStruxure™ Process Expert will address this issue directly. Failure to apply the mitigations provided below may allow an attacker to perform privileged file operations, which could result in remote code execution. March 2022 Update: EcoStruxure™ Process Expert 2021 includes a fix for these vulnerabilities.