Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert, EcoStruxure™ Process
Expert for AVEVA System Platform products.
The EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform products are
engineering tools that facilitates and automates the design, maintenance, commissioning, and operation of
Control projects for Modicon controllers and the associated Supervision projects for SCADA software
regrouped in a system..
Failure to apply the Fix/Mitigations provided below may risk a local privilege escalation, which could result in
loss of confidentiality, integrity and availability of the engineering workstation.
Vulnerabilities 1
-
High 7.8
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data an…
Revision history
-
#2.0.0
A remediation is available for EcoStruxure™ Process Expert for AVEVA System Platform
-
#1.0.0
Original Release
References
-
EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA - SEVD-2025-042-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390