Schneider Electric EcoStruxure™ Process Expert vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Schneider Electric EcoStruxure™ Process Expert: 1 record(s), with affected versions and fixes.
CVE-2025-13905
High · 7.0
CWE-276 Jan 29, 2026
Incorrect Default Permissions in Schneider Electric EcoStruxure™ Process Expert
CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service restart.