Description
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized
access, loss of confidentiality, integrity and availability of the workstation when non-admin
authenticated user tries to perform privilege escalation by tampering with the binaries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Vijeo Designer | Prior to V6.3 SP1 | — |
| Schneider Electric | Vijeo Designer embedded in EcoStruxure™ Machine Expert | All Versions | — |
Advisories 2
- ICSA-25-014-02 Schneider Electric Vijeo Designer and EcoStruxureâ„¢ Machine Expert (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2024-254-01 Vijeo Designer Schneider Electric CPCERT · Jul 8, 2025