8.5
High
CVE-2025-0327 CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and…
Description
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as server managing client request) that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the executable path of the windows services. To be exploited, services need to be restarted.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Process Expert | Versions not published | |
| EcoStruxure Process Expert for AVEVA System Platform | Versions not published |
Other CVEs of EcoStruxure Process Expert
The 9 CVEs of EcoStruxure Process Expert →
CVE-2023-27975
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project…
7.1
High
CVE-2023-6408
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…
8.1
High
CVE-2023-6409
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file…
7.7
High
CVE-2022-45789
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized…
8.1
High