CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 15:53.
Filters
1 actief1 advisories gevonden
SEVD-2026-013-02
Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert
Gepubliceerd
13 januari 2026
Laatste update
12 mei 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market-agile plant. The EcoStruxure™ Process Expert for AVEVA System Platform product enables users to achieve operational profitability from design engineering to meeting the demands of modern-day production. It provides an asset centric and object-oriented automation platform to deploy system-wide standards in a digital ecosystem. Failure to apply the Fix/Mitigations provided below may risk modification of the executable binaries, which could result in privilege escalation.
Mitigatiesamenvatting
Version 2025 of EcoStruxure™ Process Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert
Revisiegeschiedenis (2)
Initiële publicatie — 13 januari 2026
Original Release
Update A — 12 mei 2026
A remediation is available for EcoStruxure™ Process Expert for AVEVA System Platform