Description
The vulnerability, if exploited, could allow a miscreant with read
access to Edge Project files or Edge Offline Cache files to reverse
engineer Edge users' app-native or Active Directory passwords through
computational brute-forcing of weak hashes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | Edge | ≤ Versions 2023 R2 | — |
Advisories 3
- ICSA-25-317-03 AVEVA Edge CISA ICS & IT advisories · Nov 13, 2025
- ICSA-25-322-01 Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio CISA ICS & IT advisories · Nov 11, 2025
- SEVD-2025-315-02 EcoStruxure™ Machine SCADA Expert & Pro-face BLUE Open Studio Schneider Electric CPCERT · Nov 11, 2025