8.5
Élevée
CVE-2025-0327 CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and…
Description
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as server managing client request) that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the executable path of the windows services. To be exploited, services need to be restarted.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure Process Expert | Versions non publiées | |
| EcoStruxure Process Expert for AVEVA System Platform | Versions non publiées |
Autres CVE de EcoStruxure Process Expert
Les 9 CVE de EcoStruxure Process Expert →
CVE-2023-27975
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project…
7.1
Élevée
CVE-2023-6408
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…
8.1
Élevée
CVE-2023-6409
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file…
7.7
Élevée
CVE-2022-45789
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized…
8.1
Élevée