https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:29:21.335772+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-0813 CVE-2025-0813 2026-10-07T22:29:21.352698+00:00

Affected: Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.

 https://cve.radiocsirt.org/vuln/sevd-2025-070-02 SEVD-2025-070-02 — EPAS-UI & EcoSUI 2026-10-07T22:29:21.352753+00:00

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Automation System User Interface (EPAS-UI) product.

The EcoStruxure Power Automation System User Interface (EPAS-UI) https://www.se.com/ng/en/product-range/61456-ecostruxure-power-automation-system-user-interface/#overview product is an HMI SCADA designed for electrical networks and substations operations.

Failure to apply the fix provided below may risk an Authentication Bypass attack, which could result in an attacker taking partial to full control of EPAS-UI.