Description
CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering
workstation when specific driver interface is invoked locally by an authenticated user with crafted input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Uni-Telway driver | All versions | — |
| Schneider Electric | Uni-Telway driver used in EcoStruxure Control Expert | All versions | — |
| Schneider Electric | Uni-Telway driver used in EcoStruxure Process Expert | All Versions | — |
| Schneider Electric | Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform | All Versions | — |
| Schneider Electric | Uni-Telway driver used in OPC Factory Server | All Versions | — |
Advisories 2
- ICSA-25-070-01 Schneider Electric Uni-Telway Driver (Update D) CISA ICS & IT advisories · Jun 11, 2026
- SEVD-2025-042-02 Improper Input Validation Vulnerability in Uni-Telway Driver Schneider Electric CPCERT · May 12, 2026