EcoStruxure Process Expert for AVEVA System Platform vulnerabilities

2 known vulnerabilities in EcoStruxure Process Expert for AVEVA System Platform from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  EcoStruxure™ Process Expert: Incorrect Default Permissions

  CVE-2025-13905Jan 29, 2026Schneider Electric

  CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service

• 7.8 High severity

  EcoStruxure Process Expert: Improper Privilege Management

  CVE-2025-0327Feb 13, 2025Schneider Electric

  CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as server managing client request) that could cause a loss of Confidentiality, Integrity and Availability of engineering w