CVE-2025-0327: fallo de gravedad alta en Schneider Electric EcoStruxure Process Expert
Publicada el
Seguir esta CVE+ Monitorear EcoStruxure Process Expert+ Monitorear EcoStruxure Process Expert for AVEVA System Platform
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.5epss 0.2%
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit
trail data and the other acting as server managing client request) that could cause a loss of Confidentiality,
Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the
executable path of the windows services. To be exploited, services need to be restarted.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Schneider Electric · EcoStruxure Process ExpertSchneider Electric · EcoStruxure Process Expert for AVEVA System PlatformCVEs relacionadas — Schneider Electric EcoStruxure Process Expert
En el mismo producto, de las más peligrosas a las menos.