ICSA-25-322-01

icsaUScisa_csaf_ot

Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio

Advisory ansehen veröffentlicht 2025-11-11

Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxure Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedicated to Line Management & Lite Supervision applications to run in Harmony Industrial PC and GTU Open Box. Pro-face BLUE Open Studio is a development and runtime software that incorporates tools users need to create SCADA HMI applications, dashboards, and OEE interfaces. Failure to apply the remediation provided below may risk brute-force password recovery attacks, which could result in unauthorized access to user accounts and lead to loss of Confidentiality, and Integrity.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-9317US—OT erhöht—
The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active D…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationBLUE Open Studio

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Access Control Lists should be applied to all folders where users will save and load project files. • Maintain a trusted chain-of-custody on project files during creation, modification, distribution, backups, and use. • Apply data-protection at the project level with a strong master password. For configuration step-by-step refer to “Technical Reference Manual” > Project Overview > Configuring Additional Project Settings > Options Tab > Data Protection. • If passwords are being used as function parameters inside project documents (such as scripts or worksheets), it is recommended to remove those passwords and use project tags instead. For more information on tags refer to “Technical Reference Manual” > Tags and the Tag Database > About Tags and the Project Database.

  • MitigationEcoStruxure Machine SCADA Expert

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Access Control Lists should be applied to all folders where users will save and load project files. • Maintain a trusted chain-of-custody on project files during creation, modification, distribution, backups, and use. • Apply data-protection at the project level with a strong master password. For configuration step-by-step refer to “Technical Reference Manual” > Project Overview > Configuring Additional Project Settings > Options Tab > Data Protection. • If passwords are being used as function parameters inside project documents (such as scripts or worksheets), it is recommended to remove those passwords and use project tags instead. For more information on tags refer to “Technical Reference Manual” > Tags and the Tag Database > About Tags and the Project Database.

  • BehobenBLUE Open Studio

    Version 2023.1 Patch 1 of Pro-face BLUE Open Studio includes a fix for this vulnerability and is available for download here: https://www.proface.com/en/hmi_design_studio/bos/page/installer For additional details please refer to the supplied Release Notes file in Version 2023.1 Patch 1

    https://www.proface.com/en/hmi_design_studio/bos/page/installer
  • BehobenEcoStruxure Machine SCADA Expert

    Version 2023.1 Patch 1 of EcoStruxure Machine SCADA Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/63734-ecostruxure-machine-scada-expert/#software-and-firmware For additional details please refer to the supplied ReadMe help file in Version 2023.1 Patch 1

    https://www.se.com/ww/en/product-range/63734-ecostruxure-machine-scada-expert/#software-and-firmware
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan