The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.

The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.

The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.

Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxureTM Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxureTM Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects dedicated to Line Management & Lite Supervision applications to run in Harmony Industrial PC and GTU Open Box. Pro-face BLUE Open Studio is a development and runtime software that incorporates tools users need to create SCADA HMI applications, dashboards, and OEE interfaces. Failure to apply the remediation provided below may risk brute-force password recovery attacks, which could result in unauthorized access to user accounts and lead to loss of Confidentiality, and Integrity.