Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 15:23.

1 Advisories gefunden

SEVD-2025-014-07

FlexNet Publisher Vulnerability

Schneider Electric — EcoStruxure Control Expert

Schneider Electric CPCERThoch

Veröffentlicht

14. Januar 2025

Letzte Aktualisierung

12. Mai 2026

Verknüpfte CVEs

Betroffene Sektoren

Risk Evaluation

Schneider Electric is aware of a vulnerability disclosed on Revenera FlexNet Publisher component. Many vendors, including Schneider Electric, embed Revenera FlexNet Publisher in their offers. Failure to apply the remediation/mitigations provided below may risk a local privilege escalation, which could lead to the execution of a malicious DLL with elevated privilege.

Zusammenfassung der Gegenmaßnahmen

Version 16.2 of EcoStruxure™ Control Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/ Reboot the computer after installation is completed.

Revisionshistorie (4)
  1. Erstveröffentlichung — 14. Januar 2025

    Original Release

  2. Update A — 11. Februar 2025

    A remediation is available for the EcoStruxure™ Process Expert offer. The EcoStruxure™ Process Expert for AVEVA System Platform offer is added to the “Affected Product and Versions” section

  3. Update B — 8. Juli 2025

    Pro-face BLUE is added to the “Affected Product and Versions” section. Remediations are now available for EcoStruxure™Control Expert, EcoStruxure™ Operator Terminal Expert and Pro-face BLUE offers. Updated the link to the fix of EcoStruxure™ Control Expert Asset Link offer

  4. Update C — 14. Oktober 2025

    A remediation is now available for Zelio Soft 2 and EcoStruxure™ OPC UA Server Expert offers

Offizielle Quelle: Schneider Electric CPCERT