CVE-2025-9317
highpriority · track · 0EPSS 0.001 · 1 %ileEURUUSEPSS · scored 2026-10-21
The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedEdgecisa_csaf_ot
Apply data-protection at the project level with a strong master password. For configuration step-by-step refer to AVEVA Edge "Technical Reference Manual" > Project Overview > Configuring Additional Project Settings > Options Tab > Data Protection.
- FixedBLUE Open Studiocisa_csaf_ot
Version 2023.1 Patch 1 of Pro-face BLUE Open Studio includes a fix for this vulnerability and is available for download here: https://www.proface.com/en/hmi_design_studio/bos/page/installer For additional details please refer to the supplied Release Notes file in Version 2023.1 Patch 1
https://www.proface.com/en/hmi_design_studio/bos/page/installer - FixedEcoStruxure Machine SCADA Expertcisa_csaf_ot
Version 2023.1 Patch 1 of EcoStruxure Machine SCADA Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/63734-ecostruxure-machine-scada-expert/#software-and-firmware For additional details please refer to the supplied ReadMe help file in Version 2023.1 Patch 1
https://www.se.com/ww/en/product-range/63734-ecostruxure-machine-scada-expert/#software-and-firmware - MitigationEdgecisa_csaf_ot
AVEVA recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation.
- MitigationBLUE Open Studiocisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Access Control Lists should be applied to all folders where users will save and load project files. • Maintain a trusted chain-of-custody on project files during creation, modification, distribution, backups, and use. • Apply data-protection at the project level with a strong master password. For configuration step-by-step refer to “Technical Reference Manual” > Project Overview > Configuring Additional Project Settings > Options Tab > Data Protection. • If passwords are being used as function parameters inside project documents (such as scripts or worksheets), it is recommended to remove those passwords and use project tags instead. For more information on tags refer to “Technical Reference Manual” > Tags and the Tag Database > About Tags and the Project Database.
- MitigationEcoStruxure Machine SCADA Expertcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Access Control Lists should be applied to all folders where users will save and load project files. • Maintain a trusted chain-of-custody on project files during creation, modification, distribution, backups, and use. • Apply data-protection at the project level with a strong master password. For configuration step-by-step refer to “Technical Reference Manual” > Project Overview > Configuring Additional Project Settings > Options Tab > Data Protection. • If passwords are being used as function parameters inside project documents (such as scripts or worksheets), it is recommended to remove those passwords and use project tags instead. For more information on tags refer to “Technical Reference Manual” > Tags and the Tag Database > About Tags and the Project Database.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.6–8.4
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (12)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- ICSA-25-317-03AVEVA Edge2025-11-13icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow a local attacker to reverse engineer passwords through brute force.
- ICSA-25-322-01Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio2025-11-11icsa · cisa_csaf_otUS
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxure Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedicated to Line Management & Lite Supervision applications to run in Harmony Industrial PC and GTU Open Box. Pro-face BLUE Open Studio is a development and runtime software that incorporates tools users need to create SCADA HMI applications, dashboards, and OEE interfaces. Failure to apply the remediation provided below may risk brute-force password recovery attacks, which could result in unauthorized access to user accounts and lead to loss of Confidentiality, and Integrity.
also known as (6)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (11)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-9317cnnvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-03.jsoncnnvd
- https://softwaresupportsp.aveva.com/en-US/downloads/products/details/38f52447-3013-4c4e-be6e-9b28b635bba9Patchcnnvd
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-006.pdfcnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-03cnnvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-03.jsonenisa_euvd
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-006.pdfenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-03enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan