CVE-2025-0327
CVE-2025-0327
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit
trail data and the other acting as server managing client request) that could cause a loss of Confidentiality,
Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the
executable path of the windows services. To be exploited, services need to be restarted.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Schneider Electric · EcoStruxure Process ExpertSchneider Electric · EcoStruxure Process Expert for AVEVA System PlatformWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →