CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 16:54.
Filter
1 aktiv1 Advisories gefunden
SEVD-2025-042-03
EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform
Veröffentlicht
11. Februar 2025
Letzte Aktualisierung
12. Mai 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform products are engineering tools that facilitates and automates the design, maintenance, commissioning, and operation of Control projects for Modicon controllers and the associated Supervision projects for SCADA software regrouped in a system.. Failure to apply the Fix/Mitigations provided below may risk a local privilege escalation, which could result in loss of confidentiality, integrity and availability of the engineering workstation.
Zusammenfassung der Gegenmaßnahmen
Version v4.8.0.5715 of EcoStruxure™ Process Expert 2023 Software Package includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/65406-ecostruxure-processexpert/#software-and-firmware Uninstall Previous Version 2023 (v4.8.0.5115) before installing Version 2023 (v4.8.0.5715). Version string could be found on engineering server console.
Revisionshistorie (2)
Erstveröffentlichung — 11. Februar 2025
Original Release
Update A — 12. Mai 2026
A remediation is available for EcoStruxure™ Process Expert for AVEVA System Platform