Skip to content
OpenAdvisories
High SEVD-2025-042-03 1 CVE

EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform

Published Feb 11, 2025 · Updated May 12, 2026 · Revision 2

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert, EcoStruxure™ Process
Expert for AVEVA System Platform products.
The EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform products are
engineering tools that facilitates and automates the design, maintenance, commissioning, and operation of
Control projects for Modicon controllers and the associated Supervision projects for SCADA software
regrouped in a system..
Failure to apply the Fix/Mitigations provided below may risk a local privilege escalation, which could result in
loss of confidentiality, integrity and availability of the engineering workstation.

Vulnerabilities 1

Revision history

  1. #2.0.0

    A remediation is available for EcoStruxure™ Process Expert for AVEVA System Platform

  2. #1.0.0

    Original Release

References