The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure™ Machine SCADA Expert and BLUE Open Studio products. The EcoStruxure™ Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedicated to Line Management & Lite Supervision applications to run in Harmony Industrial PC and GTU Open Box. Pro-face BLUE Open Studio is a development and runtime software that incorporates tools users need to create SCADA HMI applications, dashboards, and OEE interfaces. Failure to apply the remediation provided below may risk privilege escalation and/or Arbitrary code execution which could result in information disclosure, integrity loss or denial of service.