CVE-2025-0327
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as server managing client request) that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the executable path of the windows services. To be exploited, services need to be restarted.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EcoStruxure Process Expert
- Vendor
- Schneider Electric
- Product
- EcoStruxure Process Expert
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Versions 2020R2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Versions 2021 & 2023 (prior to v4.8.0.5715) | affected | Unavailable | Unavailable | Unavailable | None listed |
EcoStruxure Process Expert for AVEVA System Platform
- Vendor
- Schneider Electric
- Product
- EcoStruxure Process Expert for AVEVA System Platform
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Versions 2020R2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Versions 2021 & 2023 | affected | Unavailable | Unavailable | Unavailable | None listed |