CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 16:54.
Filter
1 aktiv1 Advisories gefunden
SEVD-2026-013-02
Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert
Veröffentlicht
13. Januar 2026
Letzte Aktualisierung
12. Mai 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market-agile plant. The EcoStruxure™ Process Expert for AVEVA System Platform product enables users to achieve operational profitability from design engineering to meeting the demands of modern-day production. It provides an asset centric and object-oriented automation platform to deploy system-wide standards in a digital ecosystem. Failure to apply the Fix/Mitigations provided below may risk modification of the executable binaries, which could result in privilege escalation.
Zusammenfassung der Gegenmaßnahmen
Version 2025 of EcoStruxure™ Process Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert
Revisionshistorie (2)
Erstveröffentlichung — 13. Januar 2026
Original Release
Update A — 12. Mai 2026
A remediation is available for EcoStruxure™ Process Expert for AVEVA System Platform