Schneider Electric EcoStruxure Process Expert (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market-agile plant. The EcoStruxure™ Process Expert for AVEVA System Platform product enables users to achieve operational profitability from design engineering to meeting the demands of modern-day production. It provides an asset centric and object-oriented automation platform to deploy system-wide standards in a digital ecosystem. Failure to apply the Fix/Mitigations provided below may risk modification of the executable binaries, which could result in privilege escalation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-13905US | —OT elevated | — | ||
CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modif… | ||||
references
External citations — patches, advisories, analysis.
- Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert - SEVD-2026-013-02 PDF Versionself
- Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert - SEVD-2026-013-02 CSAF Versionself
- ICS Advisory ICSA-26-022-01 JSONself
- ICS Advisory ICSA-26-022-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationEcoStruxure Process Expert for AVEVA System Platform
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Recommended to apply application whitelisting at system level to allow execution of authenticated applications. More details available here: https://www.se.com/ww/en/download/document/EIO0000004778/ • Recommended to allow access to the system only to the required users.
https://www.se.com/ww/en/download/document/EIO0000004778/ - MitigationEcoStruxure™ Process Expert
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Recommended to apply application whitelisting at system level to allow execution of authenticated applications. More details available here: https://www.se.com/ww/en/download/document/EIO0000004778/ • Recommended to allow access to the system only to the required users.
https://www.se.com/ww/en/download/document/EIO0000004778/ - FixedEcoStruxure Process Expert for AVEVA System Platform
Version 2025 of EcoStruxure™ Process Expert for AVEVA System Platform includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/55570689-ecostruxure-process-expert-for-aveva-system-platform/#software-and-firmware
https://www.se.com/ww/en/product-range/55570689-ecostruxure-process-expert-for-aveva-system-platform/#software-and-firmware - FixedEcoStruxure™ Process Expert
Version 2025 of EcoStruxure™ Process Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert
https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan