CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.

Schneider Electric is aware of a vulnerability in its Vijeo Designer product.

The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Designer software offers functions such as multimedia capabilities and remote access for more efficiency.

Failure to apply the remediations provided below may risk privilege escalation, which could result in unauthorized access to workstation resources.

July 2025 Update: A remediation is now available for EcoStruxure™ Machine Expert (with Vijeo Designer optional component installed).

Schneider Electric is aware of a vulnerability in its Vijeo Designer product.

The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Designer software offers functions such as multimedia capabilities and remote access for more efficiency.

Failure to apply the remediations provided below may risk privilege escalation, which could result in unauthorized access to workstation resources.

July 2025 Update: A remediation is now available for EcoStruxure™ Machine Expert (with Vijeo Designer optional component installed).