Skip to content
OpenAdvisories
Medium SEVD-2025-042-02 1 CVE

Improper Input Validation Vulnerability in Uni-Telway Driver

Published Feb 11, 2025 · Updated May 12, 2026 · Revision 5

Vendor: Schneider Electric Product: EcoStruxure Control Expert Product: EcoStruxure™ Process Expert Product: EcoStruxure™ Process Expert for AVEVA System Platform Product: OPC Factory Server Product: Uni-Telway driver

Summary

Schneider Electric is aware of a vulnerability in its [Uni-Telway driver](https://www.se.com/us/en/product-range/573-unitelway/#overview) which is part of [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/#overview), [EcoStruxure™ Process Expert](https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert), [EcoStruxure™ Process Expert for AVEVA System Platform](https://www.se.com/ww/en/product-range/55570689-ecostruxure-process-expert-for-aveva-system-platform/#overview) and [OPC Factory Server](https://www.se.com/ww/en/product-range/547-opc-factory-server/) products.

Failure to apply the mitigations provided below may risk denial of service of engineering workstation, which could result in interruption of engineering operation.

Vulnerabilities 1

Revision history

  1. #4.0.0

    Mitigation is now available for EcoStruxure™ Process Expert for AVEVA System Platform.

  2. #3.1.0

    Removed comment “EcoStruxure™ Process Expert found to be not affected by this vulnerability.

  3. #3.0.0

    Mitigations are now available for EcoStruxure™ Process Expert. EcoStruxure™ Process Expert found to be not affected by this vulnerability and advisory title has been modified

  4. #2.0.0

    Mitigations section updated for EcoStruxure™ Control Expert and OPC Factory Server.

  5. #1.0.0

    Original Release

References