https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:08:52.932872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-726 certfr-2020-avi-726 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-05T09:08:53.010583+00:00 certfr-2020-avi-726 https://cve.radiocsirt.org/vuln/euvd-2026-37997 EUVD-2026-37997 2026-10-05T09:08:53.010634+00:00 EUVD-2026-37997 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7544 fkie_cve-2020-7544 2026-10-05T09:08:53.010660+00:00

A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.

 https://cve.radiocsirt.org/vuln/ghsa-6p79-8657-j6hj GHSA-6p79-8657-j6hj 2026-10-05T09:08:53.010691+00:00

A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.

 https://cve.radiocsirt.org/vuln/gsd-2020-7544 gsd-2020-7544 2026-10-05T09:08:53.010708+00:00 gsd-2020-7544 https://cve.radiocsirt.org/vuln/icsa-20-336-01 ICSA-20-336-01 — Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD) 2026-10-05T09:08:53.010719+00:00

An improper privilege management vulnerability exists that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxure Operator Terminal Expert.CVE-2020-7544 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/sevd-2020-315-02 SEVD-2020-315-02 — EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime 2026-10-05T09:08:53.010738+00:00

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Operator Terminal Expert (formerly known as Vijeo XD), Pro-face BLUE and WinGP runtimes. This vulnerability impacts Windows PC and Harmony iPC offers. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI designs. WinGP is a runtime engine on Windows PC and is included in Pro-face GP-Pro EX product which is an HMI Screen Editor & Logic Programming Software for Pro-face. Failure to apply the remediations provided below may risk unauthorized command execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality and integrity of the workstation where EcoStruxure™ Operator Terminal Expert , Pro-face BLUE or WinGP runtime is installed. January 2021 update: Added Pro-face BLUE and WinGP to the list of products affected and links to the fixes